CVE-2023-2736: The Groundhogg plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.9.8. This is due to missing nonce validation in the 'ajax_edit_contact' functio...

Summary

The Groundhogg plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.9.8. This is due to missing nonce validation in the 'ajax_edit_contact' function. This makes it possible for authenticated attackers to receive the auto login link via shortcode and ...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
groundhogg	groundhogg	<= 2.7.9.8 `cpe:2.3:a:groundhogg:groundhogg::::::wordpress::*`

Original advisory text

The Groundhogg plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.9.8. This is due to missing nonce validation in the 'ajax_edit_contact' functio...

The Groundhogg plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.9.8. This is due to missing nonce validation in the 'ajax_edit_contact' function. This makes it possible for authenticated attackers to receive the auto login link via shortcode and then modify the assigned user to the auto login link to elevate verified user privileges via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

References

https://plugins.trac.wordpress.org/browser/groundhogg/tags/2.7.9.8/admin/contact... Third Party Advisory
https://plugins.trac.wordpress.org/browser/groundhogg/tags/2.7.9.8/includes/shor... Third Party Advisory
https://plugins.trac.wordpress.org/changeset/2914493/groundhogg/tags/2.7.10/admi... Third Party Advisory
https://www.wordfence.com/threat-intel/vulnerabilities/id/9bf472f1-5980-48ee-aa1... Third Party Advisory