CVE-2023-28121
WooCommerce Payments Unauthenticated RCE Vulnerability
Description
An issue in WooCommerce Payments plugin for WordPress (versions 5.6.1 and lower) allows an unauthenticated attacker to send requests on behalf of an elevated user, like administrator. This allows a remote, unauthenticated attacker to gain admin access on a site that has the affected version of the plugin activated.
INFO
Published Date :
April 12, 2023, 9:15 p.m.
Last Modified :
Dec. 18, 2023, 3:22 p.m.
Source :
[email protected]
Remotely Exploitable :
Yes !
Impact Score :
5.9
Exploitability Score :
3.9
Public PoC/Exploit Available at Github
CVE-2023-28121 has a 8 public PoC/Exploit available at Github.
Go to the Public Exploits tab to see the list.
Affected Products
The following products are affected by CVE-2023-28121
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2023-28121.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
None
Python
Python 2.7
Python
PoC. Severity critical.
Shell Ruby Python PHP
PoC. Severity critical.
cve-2023-1671 cve-2023-27350 cve-2023-2868 cve-2023-3519 cve-2023-34960 exploit poc cve-2023-28121 cve-2023-28771 cve-2023-35885 cve-2023-38646 cve-2023-34124 citrix sonicwall cve-2023-4596 cve-2023-26469 cve-2023-23333 ivanti cve-2023-40044 cve-2023-22515
Shell Python Ruby PHP
None
CVE-2023-28121 - WooCommerce Payments < 5.6.2 - Unauthenticated Privilege Escalation [ Mass Add Admin User ]
Python
CVE-2023-28121 - WooCommerce Payments < 5.6.2 - Unauthenticated Privilege Escalation [ Mass Add Admin User ]
exploit mass python woocommerce woocommerce-payment wordpresss cve-2023-28121
Python
WooCommerce Payments: Unauthorized Admin Access Exploit
Python
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2023-28121 vulnerability anywhere in the article.
-
BleepingComputer
Google: 70% of exploited flaws disclosed in 2023 were zero-days
Google Mandiant security analysts warn of a worrying new trend of threat actors demonstrating a better capability to discover and exploit zero-day vulnerabilities in software. Specifically, of the 138 ... Read more
-
Help Net Security
Defenders must adapt to shrinking exploitation timelines
A new report from Mandiant reveals that the average time-to-exploit vulnerabilities before or after a patch is released has plunged to just five days in 2023, down from 32 days in 2021 in 2022. One re ... Read more
-
Google Cloud
How Low Can You Go? An Analysis of 2023 Time-to-Exploit Trends
Written by: Casey Charrier, Robert Weiner Mandiant analyzed 138 vulnerabilities that were disclosed in 2023 and that we tracked as exploited in the wild. Consistent with past analyses, the majority (9 ... Read more
The following table lists the changes that have been made to the
CVE-2023-28121 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by [email protected]
May. 14, 2024
Action Type Old Value New Value -
CVE Modified by [email protected]
Jul. 03, 2023
Action Type Old Value New Value Added Reference https://www.rcesecurity.com/2023/07/patch-diffing-cve-2023-28121-to-compromise-a-woocommerce/ [No Types Assigned] -
Initial Analysis by [email protected]
Apr. 21, 2023
Action Type Old Value New Value Added CVSS V3.1 NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Changed Reference Type https://developer.woocommerce.com/2023/03/23/critical-vulnerability-detected-in-woocommerce-payments-what-you-need-to-know/ No Types Assigned https://developer.woocommerce.com/2023/03/23/critical-vulnerability-detected-in-woocommerce-payments-what-you-need-to-know/ Vendor Advisory Added CWE NIST CWE-287 Added CPE Configuration OR *cpe:2.3:a:automattic:woocommerce_payments:*:*:*:*:*:wordpress:*:* versions from (including) 4.8.0 up to (excluding) 4.8.2 *cpe:2.3:a:automattic:woocommerce_payments:4.9.0:*:*:*:*:wordpress:*:* *cpe:2.3:a:automattic:woocommerce_payments:*:*:*:*:*:wordpress:*:* versions from (including) 5.0.0 up to (excluding) 5.0.4 *cpe:2.3:a:automattic:woocommerce_payments:*:*:*:*:*:wordpress:*:* versions from (including) 5.1.0 up to (excluding) 5.1.3 *cpe:2.3:a:automattic:woocommerce_payments:*:*:*:*:*:wordpress:*:* versions from (including) 5.2.0 up to (excluding) 5.2.2 *cpe:2.3:a:automattic:woocommerce_payments:5.3.0:*:*:*:*:wordpress:*:* *cpe:2.3:a:automattic:woocommerce_payments:5.4.0:*:*:*:*:wordpress:*:* *cpe:2.3:a:automattic:woocommerce_payments:*:*:*:*:*:wordpress:*:* versions from (including) 5.5.0 up to (excluding) 5.5.2 *cpe:2.3:a:automattic:woocommerce_payments:*:*:*:*:*:wordpress:*:* versions from (including) 5.6.0 up to (excluding) 5.6.2
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2023-28121 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2023-28121
weaknesses.
Exploit Prediction
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.
92.98 }} 0.25%
score
0.99141
percentile