ByteOS Network

Vulnerability Details :

CVE-2019-25142

Assigner Org ID-b15e7b5b-3da4-40ae-a43c-f7aa60e62599

Published At-07 Jun, 2023 | 01:51

Updated At-23 Dec, 2024 | 16:21

The Mesmerize & Materialis themes for WordPress are vulnerable to authenticated options change in versions up to, and including,1.6.89 (Mesmerize) and 1.0.172 (Materialis). This is due to 'companion_disable_popup' function only checking the nonce while sending user input to the 'update_option' function. This makes it possible for authenticated attackers to change otherwise restricted options.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:Wordfence

Assigner Org ID:b15e7b5b-3da4-40ae-a43c-f7aa60e62599

Published At:07 Jun, 2023 | 01:51

Updated At:23 Dec, 2024 | 16:21

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

extendthemes

Product

Mesmerize

Default Status

unaffected

Versions

Affected

From * through 1.6.89 (semver)

Vendor

extendthemes

Product

Materialis

Default Status

unaffected

Versions

Affected

From * through 1.0.172 (semver)

Problem Types

Type	CWE ID	Description
N/A	N/A	CWE-862 Missing Authorization

Type: N/A

CWE ID: N/A

Description: CWE-862 Missing Authorization

Metrics

Version	Base score	Base severity	Vector
3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Credits

finder

Jerome Bruandet

Timeline

Event	Date
Disclosed	2019-12-02 00:00:00

Event: Disclosed

Date: 2019-12-02 00:00:00

References

Hyperlink	Resource
https://www.wordfence.com/threat-intel/vulnerabilities/id/8c9c3302-47cd-4dbe-b79e-5e6032928074?source=cve	N/A
https://blog.nintechnet.com/wordpress-mesmerize-and-materialis-themes-fixed-an-authenticated-options-change-vulnerability/	N/A
https://wpscan.com/vulnerability/e4d70f03-69d5-4cca-8300-985f68d19ddc	N/A
https://wordpress.org/themes/mesmerize/	N/A
https://wordpress.org/themes/materialis/	N/A
https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=121291%40mesmerize&new=121291%40mesmerize&sfp_email=&sfph_mail=	N/A
https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=121290%40materialis&new=121290%40materialis&sfp_email=&sfph_mail=	N/A

Hyperlink: https://www.wordfence.com/threat-intel/vulnerabilities/id/8c9c3302-47cd-4dbe-b79e-5e6032928074?source=cve

Resource: N/A

Hyperlink: https://blog.nintechnet.com/wordpress-mesmerize-and-materialis-themes-fixed-an-authenticated-options-change-vulnerability/

Resource: N/A

Hyperlink: https://wpscan.com/vulnerability/e4d70f03-69d5-4cca-8300-985f68d19ddc

Resource: N/A

Hyperlink: https://wordpress.org/themes/mesmerize/

Resource: N/A

Hyperlink: https://wordpress.org/themes/materialis/

Resource: N/A

Hyperlink: https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=121291%40mesmerize&new=121291%40mesmerize&sfp_email=&sfph_mail=

Resource: N/A

Hyperlink: https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=121290%40materialis&new=121290%40materialis&sfp_email=&sfph_mail=

Resource: N/A

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://www.wordfence.com/threat-intel/vulnerabilities/id/8c9c3302-47cd-4dbe-b79e-5e6032928074?source=cve	x_transferred
https://blog.nintechnet.com/wordpress-mesmerize-and-materialis-themes-fixed-an-authenticated-options-change-vulnerability/	x_transferred
https://wpscan.com/vulnerability/e4d70f03-69d5-4cca-8300-985f68d19ddc	x_transferred
https://wordpress.org/themes/mesmerize/	x_transferred
https://wordpress.org/themes/materialis/	x_transferred
https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=121291%40mesmerize&new=121291%40mesmerize&sfp_email=&sfph_mail=	x_transferred
https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=121290%40materialis&new=121290%40materialis&sfp_email=&sfph_mail=	x_transferred

Hyperlink: https://www.wordfence.com/threat-intel/vulnerabilities/id/8c9c3302-47cd-4dbe-b79e-5e6032928074?source=cve

Resource:

x_transferred

Hyperlink: https://blog.nintechnet.com/wordpress-mesmerize-and-materialis-themes-fixed-an-authenticated-options-change-vulnerability/

Resource:

x_transferred

Hyperlink: https://wpscan.com/vulnerability/e4d70f03-69d5-4cca-8300-985f68d19ddc

Resource:

x_transferred

Hyperlink: https://wordpress.org/themes/mesmerize/

Resource:

x_transferred

Hyperlink: https://wordpress.org/themes/materialis/

Resource:

x_transferred

Hyperlink: https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=121291%40mesmerize&new=121291%40mesmerize&sfp_email=&sfph_mail=

Resource:

x_transferred

Hyperlink: https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=121290%40materialis&new=121290%40materialis&sfp_email=&sfph_mail=

Resource:

x_transferred

2. CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:security@wordfence.com

Published At:07 Jun, 2023 | 02:15

Updated At:07 Nov, 2023 | 03:09

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CPE Matches

extendthemes>>materialis>>Versions before 1.0.173(exclusive)

cpe:2.3:a:extendthemes:materialis:*:*:*:*:*:wordpress:*:*

extendthemes>>mesmerize>>Versions before 1.6.90(exclusive)

cpe:2.3:a:extendthemes:mesmerize:*:*:*:*:*:wordpress:*:*

Weaknesses

CWE ID	Type	Source
CWE-862	Primary	nvd@nist.gov

CWE ID: CWE-862

Type: Primary

Source: nvd@nist.gov