Executive Summary

This vulnerability in the Strong Testimonials WordPress plugin allows authenticated users with Contributor-level access or higher to modify or delete the rating meta on any testimonial post, including those created by other users. This happens because the plugin's 'edit_rating' function lacks a proper capability check, enabling unauthorized modification by reusing a valid nonce obtained from their own testimonial edit screen. The issue was fixed in version 3.2.19 by adding permission checks and nonce verification to prevent unauthorized edits. [2, 3]

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can impact you by allowing users with limited access (Contributor-level and above) to alter or delete ratings on testimonial posts they do not own. This unauthorized modification can lead to data integrity issues, manipulation of testimonial ratings, and potential misuse of the testimonial system, undermining trust and the reliability of displayed testimonials on your WordPress site. [2]

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, you can check the version of the Strong Testimonials plugin installed on your WordPress site. Versions up to and including 3.2.18 are vulnerable. You can do this by running a WP-CLI command to list plugin versions, for example: `wp plugin list --format=json | jq '.[] | select(.name=="strong-testimonials") | .version'`. Additionally, monitoring AJAX requests to the endpoint handling 'wp_ajax_wpmtst_edit_rating' for unauthorized edits or unusual activity could indicate exploitation attempts. However, no specific detection commands are provided in the resources. [2, 3]

Useful 0 Not Useful 0

Mitigation Strategies

The immediate mitigation step is to update the Strong Testimonials plugin to version 3.2.19 or later, as this version includes the security fix that adds proper permission checks and nonce verification to prevent unauthorized edits. If updating immediately is not possible, restrict Contributor-level users from accessing testimonial editing functionality or disable the plugin temporarily until the update can be applied. [2]

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows authenticated users with Contributor-level access and above to modify or delete rating data on testimonial posts created by other users without proper authorization. This unauthorized modification of data could lead to integrity issues and potential misuse of personal or testimonial information, which may impact compliance with data protection standards such as GDPR or HIPAA that require proper access controls and data integrity safeguards. However, specific compliance impacts are not detailed in the provided resources. [2, 3]

Useful 0 Not Useful 0