Show vulnerabilities with patch / with exploit

Information disclosure in ACF to REST API plugin for WordPress



Published: 2020-06-29
Severity Medium
Patch available YES
Number of vulnerabilities 1
CVE ID CVE-2020-13700
CWE ID CWE-200
Exploitation vector Network
Public exploit N/A
Vulnerable software
Subscribe
ACF to REST API
Web applications / Modules and components for CMS

Vendor Aires Gonçalves

Security Advisory

This security advisory describes one medium risk vulnerability.

1) Information disclosure

Severity: Medium

CVSSv3: 6.5 [CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C] [PCI]

CVE-ID: CVE-2020-13700

CWE-ID: CWE-200 - Information Exposure

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application in the "wp-json/acf/v3/options/" endpoint. A remote attacker can gain unauthorized access to sensitive information on the system from the "wp_options" table, such as a list of active plugins.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

ACF to REST API: 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.1.0, 2.1.1, 2.2.0, 2.2.1, 3.0.0-beta, 3.0.1-beta, 3.0.2, 3.0.2-beta, 3.1.0, 3.2.0

CPE External links

https://gist.github.com/mariuszpoplwski/4fbaab7f271bea99c733e3f2a4bafbb5
https://github.com/airesvsg/acf-to-rest-api
https://wordpress.org/plugins/acf-to-rest-api/#developers
https://wpvulndb.com/vulnerabilities/10284/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



ImmuniWeb® AI Platform for Application Security Testing