CVE-2023-0729 Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_sort_order
Attackers can trick administrators into changing folder structures via forged requests due to missing nonce validation in the Wicked Folders plugin.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2023-0729?
CVE-2023-0729 is a medium-severity vulnerability in wickedplugins Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types, published on 9 Jun 2023. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_save_sort_order function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing an action such as clicking on a link leading them to perform actions intended for administrators such as changing the folder structure maintained by the plugin.
Weakness: CWE-352
Which versions are affected by CVE-2023-0729?
It affects 1 product.
Products include Wickedplugins Wicked Folders.
How do I fix CVE-2023-0729?
No fix has been published for CVE-2023-0729 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-0729 being exploited?
There is no known exploitation of CVE-2023-0729 in the wild and no public exploit code.
Other vulnerabilities in wickedplugins Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types
- CVE-2021-24919 Wicked Folders < 2.18.10 - Subscriber+ SQL Injection
- CVE-2023-0684 Wicked Folders <= 2.18.16 - Missing Authorization via ajax_unassign_folders
- CVE-2023-0685 Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_unassign_folders
- CVE-2023-0711 Wicked Folders <= 2.18.16 - Missing Authorization via ajax_save_state
- CVE-2023-0715 Wicked Folders <= 2.18.16 - Missing Authorization on ajax_clone_folder
Sources
Also known as GHSA-463m-8x6w-hrq2.