CVE-2025-11877: solwininfotech User Activity Log, заобикаляне на вход

Описание

Оригинално описание

The User Activity Log plugin is vulnerable to a limited options update in versions up to, and including, 2.2. The failed-login handler 'ual_shook_wp_login_failed' lacks a capability check and writes failed usernames directly into update_option() calls. This makes it possible for unauthenticated attackers to push select site options from 0 to a non-zero value, allowing them to reopen registration or corrupt options like 'wp_user_roles', breaking wp-admin access. CVE-2025-13471 appears to be a duplicate of this CVE.

Засегнати продукти

• solwininfotech User Activity Log: до 2.2

Вид слабост

• CWE-862 Missing Authorization

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-11877
• https://nvd.nist.gov/vuln/detail/CVE-2025-11877
• https://www.wordfence.com/threat-intel/vulnerabilities/id/24225f47-cec2-4270-88f0-8696ebfb7168?source=cve
• https://plugins.trac.wordpress.org/browser/user-activity-log/trunk/user-functions.php