WordPress a10kocs Gutenberg Blocks Authenticated Privilege Escalation CVE-2023-37581

Vulnerability Summary: a10kocs - Gutenberg Blocks Privilege Escalation Vulnerability Overview Vulnerability Name: a10kocs - Gutenberg Blocks: User Dashboard Builder: Popup Builder, Form Builder & Animation Builder CVE ID: CVE-2023-37581 CVSS Score: 2.1/10 (Low) Publication Date: October 26, 2023 Last Updated: October 26, 2023 Affected Versions: ≤ 3.16.0 Vulnerability Type: Privilege Escalation (Authenticated (Contributor+) to 'roleSlug' Block Attribute) This vulnerability allows users with "Contributor" privileges or higher to escalate their own role to a higher-privilege role (e.g., Administrator) by modifying specific block attributes (such as ), thereby achieving privilege escalation. --- Scope of Impact Affected Plugin: a10kocs - Gutenberg Blocks (includes Popup Builder, Form Builder, and Animation Builder modules) Affected Versions: Version 3.16.0 and earlier Affected Functionality: Block attribute settings within the User Dashboard Builder Attack Prerequisites: Requires an account with Contributor privileges or higher --- Remediation Official Patched Version: This vulnerability has been fixed in version 3.16.1 and later. Recommended Actions: - Immediately upgrade the plugin to the latest version (≥ 3.16.1). - Inspect and clean any potentially tampered block attributes (specifically the field). - Audit user role assignments to confirm no unauthorized privilege escalation has occurred. --- POC / Exploitation Logic (No Complete Code Block, Logic Description Only) The page does not provide complete executable code but describes the exploitation logic: > Attackers can edit blocks containing the attribute (such as those in Popup Builder or Form Builder) and set its value to a target role (e.g., ). Upon saving, the user acquires the permissions associated with that role. Example pseudo-code logic (not actual code): ⚠️ Note: Actual exploitation requires interaction with the WordPress block editor interface and does not necessitate additional scripts. --- Other Related Vulnerabilities (Same Plugin) The page also lists three other related vulnerabilities: CVE-2023-37582: Popup Builder Privilege Escalation CVE-2023-37491: Animation Builder Privilege Escalation CVE-2023-37490: Animation Builder Privilege Escalation (Another Instance) All vulnerabilities have been fixed in version 3.16.1.

Goal Reached Thanks to every supporter — we hit 100%!

WordPress a10kocs Gutenberg Blocks Authenticated Privilege Escalation CVE-2023-37581