Overview
CVE-2023-5922 is a severe vulnerability affecting the Royal Elementor Addons and Templates WordPress plugin. The flaw allows unauthenticated users to access and potentially compromise sensitive content including draft, private, and password-protected posts/pages. The vulnerability is particularly severe due to its potential for data leakage and system compromise, thus posing a significant security risk to any website using this plugin.
Vulnerability Summary
CVE ID: CVE-2023-5922
Severity: High (7.5 CVSS Score)
Attack Vector: AJAX action and REST endpoint
Privileges Required: None
User Interaction: None
Impact: Unauthorized access to sensitive content and potential system compromise or data leakage
Affected Products
Escape the Surveillance Era
Most apps won’t tell you the truth.
They’re part of the problem.
Phone numbers. Emails. Profiles. Logs.
It’s all fuel for surveillance.
Ameeba Chat gives you a way out.
- • No phone number
- • No email
- • No personal info
- • Anonymous aliases
- • End-to-end encrypted
Chat without a trace.
Product | Affected Versions
Royal Elementor Addons and Templates WordPress Plugin | Before 1.3.81
How the Exploit Works
The vulnerability resides in the AJAX action and REST endpoint functions of the Royal Elementor Addons and Templates WordPress plugin. These functions do not properly enforce access control, allowing unauthenticated users to access sensitive content. An attacker can exploit this flaw by sending properly crafted AJAX requests to the vulnerable endpoints, thereby gaining access to draft, private, and password-protected posts/pages.
Conceptual Example Code
A potential exploitation of this vulnerability might look like the following HTTP request:
GET /wp-json/elementor/v2/posts/1234 HTTP/1.1
Host: vulnerable-website.comIn this example, the attacker sends a GET request to the REST endpoint of a post (with ID 1234), bypassing the access control and retrieving the content of that post.
