CVE-2023-1889CWE-639

Directorist <= 7.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion in listing_task

Medium · published June 9, 2023

CVSS v3.1
6.5
EPSS
1%
Percentile
48.5
In the wild
Unconfirmed
What it is

The Directorist plugin for WordPress is vulnerable to an Insecure Direct Object Reference in versions up to, and including, 7.5.4. This is due to improper validation and authorization checks within the listing_task function. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to delete arbitrary posts. Please note CVE-2023-35052 appears to be a duplicate of this issue.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00609 · 48.5th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2023-06-09T05:33Z
EPSS history
Timeline
  • 09 JUN 05:33Z
    Directorist <= 7.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion in listing_task
    cvelistv5