CVE-2024-12365
Boldgrid
CVE-2024-12365 in WordPress W3 Total Cache plugin allows unauthorized data access. This critical vulnerability stems from a missing capability check, affecting versions up to 2.8.1. The W3 Total Cache plugin flaw enables authenticated attackers, even with Subscriber-level access, to obtain the plugin's nonce and perform unauthorized actions. This leads to information disclosure, service plan exhaustion, and arbitrary web requests. Given the SOCRadar Vulnerability Risk Score (SVRS) of 80, CVE-2024-12365 is classified as critical and demands immediate patching. Successful exploitation could expose sensitive data and compromise internal systems, making this a high-priority security risk for WordPress sites using the W3 Total Cache plugin. The fact that it is tagged "In The Wild" should be taken very seriously.
Description
CVE-2024-12365 affects the W3 Total Cache plugin for WordPress, exposing it to unauthorized data access due to a missing capability check in the is_w3tc_admin_page function. This vulnerability allows authenticated attackers with Subscriber-level access or higher to obtain the plugin's nonce value and execute unauthorized actions. These actions can lead to information disclosure, service plan limit consumption, and unauthorized web requests originating from the web application. These requests can potentially query information from internal services, including instance metadata on cloud-based applications.
The SVRS (SOCRadar Vulnerability Risk Score) for this CVE is 44, indicating a moderate risk. While the CVSS score is 8.5, suggesting a high severity, the SVRS considers additional factors like threat actor activity, exploit availability, and other intelligence sources, resulting in a lower score.
Key Insights
- Exploitation in the Wild: This vulnerability has been observed in the wild, meaning attackers are actively exploiting it. This highlights the urgency of addressing it.
- Impact on Sensitive Data: The unauthorized access to the plugin's nonce value can lead to information disclosure, potentially revealing sensitive data about the website and its users.
- Unauthorized Web Requests: Attackers can use the vulnerability to initiate unauthorized web requests from the compromised WordPress website, potentially targeting internal services or accessing sensitive data on cloud-based applications.
- Impact on Service Plan Limits: Exploiting this vulnerability can lead to unauthorized consumption of service plan limits associated with the W3 Total Cache plugin, potentially incurring unexpected costs or service disruptions.
Mitigation Strategies
- Update the W3 Total Cache Plugin: Immediately upgrade the plugin to version 2.8.2 or later, as this version includes a fix for the vulnerability.
- Implement Strong Password Policies: Enforce strong password policies for all user accounts on the WordPress website to prevent unauthorized access.
- Enable Two-Factor Authentication: Utilize two-factor authentication (2FA) for all user accounts, including administrators, to add an extra layer of security.
- Restrict User Permissions: Limit the permissions granted to user accounts, ensuring that only authorized users have access to sensitive functionalities and data.
Additional Information
If you have additional questions or require further information about this vulnerability, please use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.