WordPress Plugin Vulnerabilities

Wordfence < 7.1.14 - Username Enumeration Prevention Bypass

Description

The plugin protection against user enumeration (ie ?author=id) could be bypassed by using an array as author parameter

Proof of Concept

Affects Plugins

Plugin icon
wordfence
Fixed in 7.1.14

References

URL
https://packetstormsecurity.com/files/#149845/
URL
http://www.waraxe.us/advisory-109.html

Miscellaneous

Original Researcher
Janek Vind "waraxe"
Submitter
Ryan Dewhurst
Submitter twitter
ethicalhack3r
Verified
Yes
WPVDB ID
007d0d95-be0c-4f08-bb9b-2f7ff9953fda

Timeline

Publicly Published
2018-10-02 (about 7 years ago)
Added
2018-10-18 (about 7 years ago)
Last Updated
2021-10-21 (about 4 years ago)

Other

Published
Title
Published
2021-08-19
Title
WP Cerber Security < 8.9.3 - Rest-API Protection Bypass
Published
2019-12-19
Title
301 Redirects - Easy Redirect Manager < 2.45 - Authenticated Arbitrary Redirect Injection and Modification, XSS, and CSRF
Published
2018-05-10
Title
BBE Theme < 1.53 - Direct Object Reference
Published
2022-09-26
Title
Drag and Drop Multiple File Upload < 1.3.6.5 - File Upload Size Limit Bypass
Published
2015-11-11
Title
BuddyPress <= 2.3.4 - Authenticated Privilege Escalation