WordPress Plugin Vulnerabilities
Schema & Structured Data for WP & AMP < 1.27 - Contributor+ reCaptcha Key Update
Description
The plugin is vulnerable to unauthorized modification of data due to a missing capability check on the 'saswp_reviews_form_render' function, allowing authenticated attackers, with contributor access and above, to modify the plugin's stored reCaptcha site and secret keys, potentially breaking the reCaptcha functionality.
Affects Plugins
Fixed in 1.27 References
Classification
Type
ACCESS CONTROLS
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Ngô Thiên An (ancorn_)
Verified
No
WPVDB ID
Timeline
Publicly Published
2024-02-19 (about 2 years ago)
Added
2024-02-20 (about 2 years ago)
Last Updated
2024-02-20 (about 2 years ago)
WPScan 