Executive Summary

The WordPress Ghost Kit Plugin versions 3.6.0 and below have a Cross Site Scripting (XSS) vulnerability. This means that attackers can inject malicious scripts into the website, which then execute when visitors access the site.

Exploitation requires a privileged user to perform an action such as clicking a malicious link or submitting a form, allowing the attacker to insert harmful scripts like redirects or advertisements.

This vulnerability has been fixed in version 3.6.1 of the plugin.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability can allow attackers to inject harmful scripts into your website, which may execute unwanted redirects, display malicious advertisements, or perform other malicious actions.

Such attacks could affect the integrity and user experience of your website and potentially harm your visitors.

The risk is considered moderate with a CVSS score of 6.5, and attackers could exploit it in mass campaigns targeting many websites.

Useful 0 Not Useful 0

Detection Guidance

The vulnerability affects WordPress sites using the Ghost Kit Plugin version 3.6.0 or below. Detection involves identifying if this plugin and vulnerable version are installed.

• Check the installed Ghost Kit plugin version in your WordPress installation.
• Look for suspicious script injections or unexpected redirects on your website that could indicate exploitation.

Specific commands are not provided in the available resources.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, immediately update the Ghost Kit plugin to version 3.6.1 or later, where the issue has been patched.

If you use Patchstack, enable auto-updates for vulnerable plugins to ensure timely patching.

Be cautious with privileged users performing actions such as clicking links or submitting forms, as exploitation requires such user interaction.

Useful 0 Not Useful 0