Unauthorized Geolocation Record Modification in GEO my WP WordPress Plugin

Executive Summary

This vulnerability affects the GEO my WP WordPress plugin versions before 4.5.5.3. It allows users with subscriber-level access or higher to modify or permanently delete geolocation records of other users or posts without proper ownership or capability checks.

Useful 0 Not Useful 0

Detection Guidance

Check for unauthorized modifications to geolocation records by reviewing WordPress database tables for unexpected changes. Inspect AJAX logs for suspicious activity from subscriber-level users targeting geolocation-related endpoints.

Useful 0 Not Useful 0

Impact Analysis

If you use this plugin, attackers with basic user access could alter or delete geolocation data of other users or posts. This could lead to misinformation, loss of critical location data, or disruption of services relying on accurate geolocation information.

Useful 0 Not Useful 0

Mitigation Strategies

Update the GEO my WP plugin to version 4.5.5.3 or later immediately. Temporarily restrict subscriber-level users from accessing admin-ajax.php or implement additional capability checks until the update is applied.

Useful 0 Not Useful 0