On a WordPress Multisite network, Forminator’s bundled WPMU DEV Hub Connector only checked the single-site manage_options capability before connecting the site to the Hub, handing out its auth nonce, storing the network-wide API key and serving its sync/logout REST endpoints. Any single-site administrator could therefore connect the whole network to a Hub account they control and use it to install plugins and themes network-wide, executing arbitrary code on every site. The patch requires manage_network_options on multisite, as upstream 1.57.0.5 does.
This vulnerability affects the following application versions:
- Smush 3.22.1
- Smush 3.22.3
- Smush 3.23.0
- Smush 3.23.1
- Smush 3.23.2
- Smush 3.23.3
- Smush 3.23.4
- Smush 3.24.0
- Smush 3.24.0-beta.2
- Smush 4.0.2
- Smush 4.0.3
- Smush 4.1.0
- Smush 4.1.1
- Smush 4.1.2
- Smush 4.2.0
- Smush 4.3.0
- Forminator Forms 1.40.0
- Forminator Forms 1.41.1
- Forminator Forms 1.41.2
- Forminator Forms 1.42.0
- Forminator Forms 1.42.1
- Forminator Forms 1.42.2
- Forminator Forms 1.43.0
- Forminator Forms 1.43.1
- Forminator Forms 1.44
- Forminator Forms 1.44.1
- Forminator Forms 1.44.2
- Forminator Forms 1.44.3
- Forminator Forms 1.45
- Forminator Forms 1.45.1
- Forminator Forms 1.46.1
- Forminator Forms 1.46.2
- Forminator Forms 1.47
- Forminator Forms 1.48.2
- Forminator Forms 1.48.3
- Forminator Forms 1.49.0
- Forminator Forms 1.49.2
- Forminator Forms 1.50.1
- Forminator Forms 1.50.3
- Forminator Forms 1.51
- Forminator Forms 1.51.1
- Forminator Forms 1.52
- Forminator Forms 1.52.1
- Forminator Forms 1.52.2
- Forminator Forms 1.53.0
- Forminator Forms 1.53.0.1
- Forminator Forms 1.53.1
- Forminator Forms 1.53.2
- Forminator Forms 1.54
- Forminator Forms 1.54.0
- Forminator Forms 1.55.0
- Forminator Forms 1.55.0.1
- Forminator Forms 1.55.0.2
- Forminator Forms 1.55.1
- Forminator Forms 1.56.0
- Forminator Forms 1.56.0.1
- Forminator Forms 1.56.0.2
- Forminator Forms 1.56.1
- Forminator Forms 1.56.2
- Forminator Forms 1.57.0
- Forminator Forms 1.57.0.1
- Forminator Forms 1.57.0.2
- Forminator Forms 1.57.0.3
- Forminator Forms 1.57.0.4