« Volver al listado

CVE-2024-13420

Estado: AnalizadaMedia (4.3)—

Multiple plugins and/or themes for WordPress are vulnerable to unauthorized access due to a missing capability check on several AJAX actions like 'gsf_reset_section_options', 'gsf_reset_section_options', 'gsf_create_preset_options' and more in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset and modify some of the plugin/theme settings. This issue was escalated to Envato over two months from the date of this disclosure and the issues, while partially patched, are still vulnerable.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

G5plus — AprilG5plus — AuteurG5plus — BenaaG5plus — Beyot

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-13420",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-13420",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-05-02T14:52:05.890131Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@wordfence.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@wordfence.com",
      "affectedData": [
        {
          "vendor": "G5Theme",
          "product": "Benaa Framework",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "semver",
              "lessThanOrEqual": "4.0.0"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "G5Theme",
          "product": "April Framework",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "semver",
              "lessThanOrEqual": "5.1"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "G5Theme",
          "product": "Beyot Framework",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "semver",
              "lessThanOrEqual": "6.0.6"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "G5Theme",
          "product": "Auteur Framework",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "semver",
              "lessThanOrEqual": "7.1"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-05-02T04:15:46.047",
  "references": [
    {
      "url": "https://themeforest.net/item/beyot-wordpress-real-estate-theme/19514964",
      "tags": [
        "Product"
      ],
      "source": "security@wordfence.com"
    },
    {
      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/6d484422-4adf-4370-b228-61496d5ad78a?source=cve",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "security@wordfence.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@wordfence.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-862"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple plugins and/or themes for WordPress are vulnerable to unauthorized access due to a missing capability check on several AJAX actions like 'gsf_reset_section_options', 'gsf_reset_section_options', 'gsf_create_preset_options' and more in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset and modify some of the plugin/theme settings. This issue was escalated to Envato over two months from the date of this disclosure and the issues, while partially patched, are still vulnerable."
    },
    {
      "lang": "es",
      "value": "Varios complementos y/o temas de WordPress son vulnerables a accesos no autorizados debido a la falta de comprobación de capacidad en varias acciones AJAX, como 'gsf_reset_section_options', 'gsf_reset_section_options', 'gsf_create_preset_options' y otras, en varias versiones. Esto permite que atacantes autenticados, con acceso de suscriptor o superior, restablezcan y modifiquen algunas configuraciones del complemento/tema. Este problema se escaló a Envato más de dos meses después de la fecha de esta divulgación y, aunque parcialmente corregido, los problemas siguen siendo vulnerables."
    }
  ],
  "lastModified": "2026-06-17T07:01:58.720",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:g5plus:april:*:*:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5D195890-0FF8-4495-8505-0C459EFB4CF6",
              "versionEndIncluding": "5.1"
            },
            {
              "criteria": "cpe:2.3:a:g5plus:auteur:*:*:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "137669BF-653B-4E96-A7BC-31E632783C44",
              "versionEndIncluding": "7.1"
            },
            {
              "criteria": "cpe:2.3:a:g5plus:benaa:*:*:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EB99B2F2-9DEF-45CC-A01E-D071BA2B30B6",
              "versionEndIncluding": "4.0.0"
            },
            {
              "criteria": "cpe:2.3:a:g5plus:beyot:*:*:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "65AFC1E7-A0CC-4DC3-8592-019FC56C48F8",
              "versionEndIncluding": "6.0.6"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@wordfence.com"
}