WordPress Plugin Vulnerabilities
PWA for WP & AMP < 1.7.33 - Authenticated (Subscriber+) Settings Change
Description
The plugin did not have a capability check in its pwaforwp_update_features_options function, and relied on CSRF check, however, the nonce was available to any authenticated user. As a result, any authenticated user (such as a subscriber) could call it and change the plugin's settings
Affects Plugins
Fixed in 1.7.33 References
Miscellaneous
Original Researcher
Jerome Bruandet (nintechnet)
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2021-07-01 (about 2 years ago)
Added
2021-07-02 (about 2 years ago)
Last Updated
2023-06-08 (about 11 months ago)
WPScan 