Unauthorised User List ID Retrieval in WP Recipe Maker

Executive Summary

This vulnerability in the WP Recipe Maker WordPress plugin before version 10.8.2 allows any authenticated user, including subscribers, to access unpublished list IDs and titles of other users due to a missing authorization check in an AJAX action.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your WordPress site uses the WP Recipe Maker plugin version before 10.8.2. You can verify the plugin version via the WordPress admin dashboard under Plugins or by inspecting the plugin files. Additionally, monitor network traffic for AJAX requests to the wprm_search_lists action from non-admin users.

Useful 0 Not Useful 0

Impact Analysis

An attacker with subscriber-level access could exploit this to view private recipe lists created by other users, potentially exposing sensitive or proprietary information.

Useful 0 Not Useful 0

Compliance Impact

This could lead to unauthorized access to personal or sensitive data, potentially violating GDPR (if personal data is exposed) or HIPAA (if health-related data is involved).

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update the WP Recipe Maker plugin to version 10.8.2 or later. If updating is not possible, consider temporarily disabling the plugin until an update is applied. Review user roles and permissions to ensure only necessary access is granted.

Useful 0 Not Useful 0