फ़ोन नंबर से लॉगिन <= 1.7.49 - प्रमाणित (सदस्य+) प्राधिकरण बाईपास से विशेषाधिकार वृद्धि

The primary impact of CVE-2024-6482 is the ability for a lower-privileged user (Subscriber) to gain administrative access to a WordPress site. This allows the attacker to modify site content, install malicious plugins, steal sensitive data, and potentially compromise the entire system. The requirement for the 'Login with Phone Number Pro' plugin to be present between versions 1.7.40 and 1.7.49 introduces a specific condition for exploitation within that timeframe, but the core vulnerability remains present in earlier versions. Successful exploitation could lead to complete site takeover and data exfiltration.

WordPress websites utilizing the Login with Phone Number plugin, particularly those with Subscriber-level users and those running versions 1.7.40-1.7.49 where the 'Login with Phone Number Pro' plugin is installed. Shared hosting environments where multiple WordPress sites share the same server are also at increased risk, as a compromise on one site could potentially lead to lateral movement.

• wordpress: Use wp-cli to check the plugin version: wp plugin version login-with-phone-number. If the version is ≤1.7.49, the system is vulnerable. • wordpress: Search plugin files (e.g., lwp-login-with-phone.php) for the lwpupdatepassword_action function and lack of capability checks. • wordpress: Monitor WordPress logs for suspicious activity related to user role changes, particularly if the 'Login with Phone Number Pro' plugin is installed between versions 1.7.40 and 1.7.49. • generic web: Monitor access logs for requests targeting the plugin's update endpoint with manipulated user data.

1. 2024-09-14Disclosure

   disclosure

1. आरक्षित2024-07-03
2. प्रकाशित2024-09-14
3. संशोधित2024-09-16
4. EPSS अद्यतन2026-04-02

The primary mitigation for CVE-2024-6482 is to upgrade the Login with Phone Number plugin to version 1.7.50 or later, which contains the fix. If immediate upgrading is not possible, consider restricting user roles and permissions within WordPress to limit the potential impact of a successful attack. Implement a Web Application Firewall (WAF) with rules to detect and block suspicious requests targeting the 'lwpupdatepassword_action' function. Regularly audit user roles and permissions to identify any unauthorized elevation.

सक्रिय इंस्टॉलेशन

1Kलोकप्रिय

प्लगइन रेटिंग