Threats tagged 'ghsa-82jx-g559-m3rq'

The WPMU DEV Dashboard plugin for WordPress contains an authentication bypass vulnerability in all versions up to and including 5.0.0. This flaw allows unauthenticated attackers to perform privileged actions such as installing and activating plugins from attacker-supplied URLs, deleting plugins and themes, upgrading WordPress core, or logging in as an administrator via SSO. The vulnerability arises because sites not connected to the WPMU DEV Hub have an empty API key, making request signatures trivially forgeable. Version 5.0.0 also removed a replay check, increasing exploitability. Sites connected to a WPMU DEV account with a valid API key are not affected.