Rewterz Threat Advisory – Multiple WordPress Vulnerabilities

Severity

Medium

Analysis Summary

CVE-2021-39200

WordPress could allow a remote attacker to obtain sensitive information, caused by leaking output data of the function wp_die() under certain conditions. By sending a specially-crafted request via JSONP, a remote attacker could exploit this vulnerability to obtain sensitive information.

CVE-2021-39201

WordPress is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the editor. A remote authenticated attacker could exploit this vulnerability to inject malicious script into a Web page which would be executed in a victim’s Web browser within the security context of the hosting Web site, once the page is viewed. An attacker could use this vulnerability to steal the victim’s cookie-based authentication credentials.

CVE-2021-39202

WordPress is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the widget editor. A remote attacker could exploit this vulnerability to inject malicious script into a Web page which would be executed in a victim’s Web browser within the security context of the hosting Web site, once the page is viewed. An attacker could use this vulnerability to steal the victim’s cookie-based authentication credentials.

CVE-2021-39203

WordPress Core could allow a remote authenticated attacker to bypass security restrictions, caused by an error in the block editor under certain conditions. An attacker could exploit this vulnerability to bypass access restrictions to view private post types/data.

Impact

• Bypass Security
• Information Disclosure
• Cross-site scripting
• Unauthorized Access

Affected Vendors

WordPress

Affected Products

• WordPress WordPress 5.8.0
• WordPress WordPress 5.8 Beta

Remediation

Refer to the vendor website for the latest patches and suggested workarounds.

For CVE-2021-39200

For CVE-2021-39201

https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-wh69-25hr-h94v
For CVE-2021-39202

CVE-2021-39203