Improper access control in YITH products - CVE-2019-16251

Vulnerability identifier: #VU22547

CSH Severity: Low

CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-16251

CWE-ID: CWE-284

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions in the “plugin-fw/lib/yit-plugin-panel-wc.php” script. A remote authenticated attacker can bypass implemented security restrictions and modify the plugin options.

YITH WooCommerce Gift Cards
YITH WooCommerce Product Bundles
YITH WooCommerce Added to Cart Popup
YITH WooCommerce Order Tracking
YITH WooCommerce Best Sellers
YITH WooCommerce Bulk Product Editing
YITH WooCommerce Authorize.net Payment Gateway
YITH PayPal Express Checkout for WooCommerce
YITH Advanced Refund System for WooCommerce
YITH WooCommerce Wishlist
YITH WooCommerce Badge Management
YITH WooCommerce Stripe
YITH WooCommerce Zoom Magnifier
YITH WooCommerce Points and Rewards
YITH WooCommerce Affiliates
YITH WooCommerce PDF Invoice and Shipping List
YITH WooCommerce Ajax Search
YITH WooCommerce Waiting List
YITH WooCommerce Questions and Answers
YITH WooCommerce Request A Quote
YITH WooCommerce Compare
YITH Desktop Notifications for WooCommerce
YITH WooCommerce Brands Add-On
YITH WooCommerce Quick View
YITH Custom Thank You Page for Woocommerce
YITH Pre-Order for WooCommerce
YITH WooCommerce Mailchimp
YITH Product Size Charts for WooCommerce
YITH WooCommerce Product Add-Ons
YITH WooCommerce Frequently Bought Together
YITH WooCommerce Advanced Reviews
YITH WooCommerce Subscription
YITH WooCommerce Social Login
YITH WooCommerce Recover Abandoned Cart
YITH WooCommerce Cart Messages
YITH WooCommerce Multi-step Checkout
YITH WooCommerce Multi Vendor
YITH Color and Label Variations for WooCommerce

Install updates from vendor's website.

YITH WooCommerce Gift Cards - update to 1.3.8
YITH WooCommerce Product Bundles - update to 1.1.17
YITH WooCommerce Added to Cart Popup - update to 1.3.13
YITH WooCommerce Order Tracking - update to 1.2.11
YITH WooCommerce Best Sellers - update to 1.1.13
YITH WooCommerce Bulk Product Editing - update to 1.2.15
YITH WooCommerce Authorize.net Payment Gateway - update to 1.1.13
YITH PayPal Express Checkout for WooCommerce - update to 1.2.6
YITH Advanced Refund System for WooCommerce - update to 1.0.12
YITH WooCommerce Wishlist - update to 2.2.14
YITH WooCommerce Badge Management - update to 1.3.21
YITH WooCommerce Stripe - update to 2.0.2
YITH WooCommerce Zoom Magnifier - update to 1.3.12
YITH WooCommerce Points and Rewards - update to 1.3.6
YITH WooCommerce Affiliates - update to 1.6.3
YITH WooCommerce PDF Invoice and Shipping List - update to 1.2.13
YITH WooCommerce Ajax Search - update to 1.7.1
YITH WooCommerce Waiting List - update to 1.3.11
YITH WooCommerce Questions and Answers - update to 1.2.0
YITH WooCommerce Request A Quote - update to 1.4.9
YITH WooCommerce Compare - update to 2.3.15
YITH Desktop Notifications for WooCommerce - update to 1.2.8
YITH WooCommerce Brands Add-On - update to 1.3.7
YITH WooCommerce Quick View - update to 1.3.15
YITH Custom Thank You Page for Woocommerce - update to 1.1.8
YITH Pre-Order for WooCommerce - update to 1.2.1
YITH WooCommerce Mailchimp - update to 2.1.4
YITH Product Size Charts for WooCommerce - update to 1.1.13
YITH WooCommerce Product Add-Ons - update to 1.5.23
YITH WooCommerce Frequently Bought Together - update to 1.2.11
YITH WooCommerce Advanced Reviews - update to 1.4.0
YITH WooCommerce Subscription - update to 1.3.6
YITH WooCommerce Social Login - update to 1.3.6
YITH WooCommerce Recover Abandoned Cart - update to 1.3.4
YITH WooCommerce Cart Messages - update to 1.4.5
YITH WooCommerce Multi-step Checkout - update to 1.7.5
YITH WooCommerce Multi Vendor - update to 3.4.1
YITH Color and Label Variations for WooCommerce - update to 1.8.13

• https://blog.nintechnet.com/authenticated-settings-change-vulnerability-in-yit-plugin-framework/
• https://wpvulndb.com/vulnerabilities/9932

• Improper access control in multiple WordPress plugins for YIT Plugin Framework