This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login.
Read the full analysis โ
Q1What is this vulnerability? (Essence + Consequences)
๐จ **Essence**: Critical Access Control Error in WordPress Plugin 'Pinterest Automatic'.
๐ **Consequences**: Unauthenticated attackers can bypass authorization.โฆ
๐ก๏ธ **CWE**: CWE-284 (Improper Access Control).
๐ **Flaw**: Missing capability checks on the `wp_pinterest_automatic_parse_request` function and `process_form.php` script.โฆ
๐ฆ **Vendor**: ValvePress.
๐ฑ **Product**: Pinterest Automatic (WordPress Plugin).
๐ **Affected Versions**: Up to and including version **1.14.3**. ๐
Q4What can hackers do? (Privileges/Data)
๐ **Privileges**: Attackers can create **new administrative user accounts** without authentication.
๐ **Data/Impact**: They can update arbitrary site options, potentially redirecting unsuspecting visitors to malicious siโฆ
๐ **Threshold**: **LOW**.
๐ **Auth**: **Unauthenticated** (PR:N). No login required.
๐ **Network**: Network accessible (AV:N).
๐ค **UI**: No user interaction needed (UI:N). Easy to exploit. ๐
Q6Is there a public Exp? (PoC/Wild Exploitation)
โ **Yes**.
๐ **PoC**: Public Nuclei template available on GitHub (projectdiscovery/nuclei-templates).
๐ **Exploitation**: Wild exploitation is likely due to the simplicity of the bypass and lack of auth requirements. ๐ท๏ธ
Q7How to self-check? (Features/Scanning)
๐ **Check**: Scan for the presence of `process_form.php` or the `wp_pinterest_automatic_parse_request` function.
๐ ๏ธ **Tool**: Use Nuclei with the specific CVE-2021-4380 template.
๐ **Indicator**: Check if the plugin versโฆ
โ **Fixed**.
๐ฉน **Patch**: Update the 'Pinterest Automatic' plugin to a version **greater than 1.14.3**.
๐ **Source**: References from Acunetix, Nintechnet, and Wordfence confirm the fix. ๐ก๏ธ
Q9What if no patch? (Workaround)
๐ง **Workaround**: If patching is delayed, **disable or delete** the 'Pinterest Automatic' plugin immediately.
๐ **Alternative**: Restrict access to `process_form.php` via `.htaccess` or WAF rules if the plugin must remaiโฆ