Themes Vulnerabilities

Newspaper Theme 6.4–6.7.1 - Privilege Escalation

Description

The Newspaper WordPress theme was affected by a Privilege Escalation security vulnerability.

Affects Themes

Newspaper
Fixed in 6.7.2

References

CVE
CVE-2016-10972
CVE
CVE-2017-18634
Exploitdb
39894
URL
https://blog.sucuri.net/2017/06/unwanted-shorte-st-ads-in-unpatched-newspaper-theme.html

Classification

Type
PRIVESC
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-269
CVSS
9.8 (critical)

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
5365ecca-93e2-4bfc-bd4a-6f61d7d75e96

Timeline

Publicly Published
2016-06-06 (about 9 years ago)
Added
2017-06-22 (about 8 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2023-06-07
Title
Directorist < 7.5.5 - Subscriber+ Arbitrary User Password Reset to Privilege Escalation
Published
2023-07-31
Title
Shop as a Customer for WooCommerce < 1.2.4 - Shop Manager+ Privilege Escalation
Published
2017-11-12
Title
WP Support Plus Responsive Ticket System < 8.0.8 - Remote Code Execution
Published
2024-12-13
Title
Frontend Admin by DynamiApps < 3.25.1 - Unauthenticated Privilege Escalation
Published
2020-01-28
Title
Wordable < 3.1.2 - Plugin's Authentication Bypass