CVE-2021-39341

high-risk
Published 2021-11-01

The OptinMonster WordPress plugin is vulnerable to sensitive information disclosure and unauthorized setting updates due to insufficient authorization validation via the logged_in_or_has_api_key function in the ~/OMAPI/RestApi.php file that can used to exploit inject malicious web scripts on sites with the plugin installed. This affects versions up to, and including, 2.6.4.

Do I need to act?

!
44.3% chance of exploitation in next 30 days
EPSS score — higher than 56% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.2/10 High
NETWORK / LOW complexity

Affected Products (1)

Optinmonster

Affected Vendors

Optinmonster

References (6)

Third Party Advisory https://plugins.trac.wordpress.org/browser/optinmonster/trunk/OMAPI/RestApi.php?...
Third Party Advisory https://wordfence.com/vulnerability-advisories/#CVE-2021-39341
Exploit https://www.wordfence.com/blog/2021/10/1000000-sites-affected-by-optinmonster-vu...
Third Party Advisory https://plugins.trac.wordpress.org/browser/optinmonster/trunk/OMAPI/RestApi.php?...
Third Party Advisory https://wordfence.com/vulnerability-advisories/#CVE-2021-39341
Exploit https://www.wordfence.com/blog/2021/10/1000000-sites-affected-by-optinmonster-vu...
50
/ 100
high-risk
Severity 28/34 · Critical
Exploitability 17/34 · Moderate
Exposure 5/34 · Minimal