Critical severity · published Jan 1, 2018
CVE-2018-3810
Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrary JavaScript or…
9.8
CVSS
91.3%
EPSS
No
On KEV
Description
Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrary JavaScript or HTML code (via the sgcgoogleanalytic parameter) that runs on all pages served by WordPress. The saveGoogleCode() function in smartgooglecode.php does not check if the current request is made by an authorized user, thus allowing any unauthenticated user to successfully update the inserted code.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)91.3% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SG
Smart Google Code Inserter · Oturia
before 3.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-3810
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-3810
Exploit
https://limbenjamin.com/articles/smart-google-code-inserter-auth-bypass.html
Release Notes
https://wordpress.org/plugins/smart-google-code-inserter/#developers
Third Party Advisory
https://wpvulndb.com/vulnerabilities/8987
Exploit
https://www.exploit-db.com/exploits/43420/
More from Smart Google Code Inserter
9.8
CVE-2018-3811
SQL Injection vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to execute SQL queries in the context of the…