CVE-2023-2987

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-2987
The Wordapp plugin for WordPress is vulnerable to authorization bypass due to an use of insufficiently unique cryptographic signature on the 'wa_pdx_op_config_set' function in versions up to, and including, 1.6.0. This makes it possible for unauthenticated attackers to the plugin to change the 'validation_token' in the plugin config, providing access to the plugin's remote control functionalities, such as creating an admin access URL, which can be used for privilege escalation.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://lana.report/publication/6e779e9a-e0f9-4102-9f0b-ad46e9c4533f/
https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/access.php#L28 Patch
https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/config.php#L59 Patch
https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/pdx.php#L64 Patch
https://plugins.trac.wordpress.org/changeset/3063322/wordapp
https://www.wordfence.com/threat-intel/vulnerabilities/id/80440bfa-4a02-4441-bbdb-52d7dd065a9d?source=cve Third Party Advisory
https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/access.php#L28 Patch
https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/config.php#L59 Patch
https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/pdx.php#L64 Patch
https://www.wordfence.com/threat-intel/vulnerabilities/id/80440bfa-4a02-4441-bbdb-52d7dd065a9d?source=cve Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:wordapp:wordapp:*:*:*:*:*:wordpress:*:*
History

08 Apr 2026, 18:18

Type Values Removed Values Added
Summary (en) The Wordapp plugin for WordPress is vulnerable to authorization bypass due to an use of insufficiently unique cryptographic signature on the 'wa_pdx_op_config_set' function in versions up to, and including, 1.5.0. This makes it possible for unauthenticated attackers to the plugin to change the 'validation_token' in the plugin config, providing access to the plugin's remote control functionalities, such as creating an admin access URL, which can be used for privilege escalation. (en) The Wordapp plugin for WordPress is vulnerable to authorization bypass due to an use of insufficiently unique cryptographic signature on the 'wa_pdx_op_config_set' function in versions up to, and including, 1.6.0. This makes it possible for unauthenticated attackers to the plugin to change the 'validation_token' in the plugin config, providing access to the plugin's remote control functionalities, such as creating an admin access URL, which can be used for privilege escalation.
References
  • () https://lana.report/publication/6e779e9a-e0f9-4102-9f0b-ad46e9c4533f/ -
  • () https://plugins.trac.wordpress.org/changeset/3063322/wordapp -

21 Nov 2024, 07:59

Type Values Removed Values Added
References () https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/access.php#L28 - Patch () https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/access.php#L28 - Patch
References () https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/config.php#L59 - Patch () https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/config.php#L59 - Patch
References () https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/pdx.php#L64 - Patch () https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/pdx.php#L64 - Patch
References () https://www.wordfence.com/threat-intel/vulnerabilities/id/80440bfa-4a02-4441-bbdb-52d7dd065a9d?source=cve - Third Party Advisory () https://www.wordfence.com/threat-intel/vulnerabilities/id/80440bfa-4a02-4441-bbdb-52d7dd065a9d?source=cve - Third Party Advisory

06 Jun 2023, 16:14

Type Values Removed Values Added
CPE cpe:2.3:a:wordapp:wordapp:*:*:*:*:*:wordpress:*:*
First Time Wordapp
Wordapp wordapp
CWE CWE-345
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
References (MISC) https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/config.php#L59 - (MISC) https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/config.php#L59 - Patch
References (MISC) https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/access.php#L28 - (MISC) https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/access.php#L28 - Patch
References (MISC) https://www.wordfence.com/threat-intel/vulnerabilities/id/80440bfa-4a02-4441-bbdb-52d7dd065a9d?source=cve - (MISC) https://www.wordfence.com/threat-intel/vulnerabilities/id/80440bfa-4a02-4441-bbdb-52d7dd065a9d?source=cve - Third Party Advisory
References (MISC) https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/pdx.php#L64 - (MISC) https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/pdx.php#L64 - Patch

31 May 2023, 03:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-05-31 03:15

Updated : 2026-04-08 18:18

NVD link : CVE-2023-2987

Mitre link : CVE-2023-2987

CVE.ORG link : CVE-2023-2987

JSON object : View

Products Affected

wordapp

  • wordapp
CWE
CWE-345

Insufficient Verification of Data Authenticity