CVE-2020-13764: Gravity Forms plugin leak hashed passwords
Summary
CVE-2020-13764: Gravity Forms plugin leak hashed passwords. Affects wp-premium/gravityforms versions < 2.4.9. Fixed in 2.4.9. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Gravity Forms plugin is a popular WordPress plugin used for creating advanced forms on websites. It provides a user-friendly interface for creating and managing forms, making it a widely used tool for collecting user data. However, a vulnerability has been discovered in versions prior to 2.4.9 that can lead to the leakage of hashed passwords. This vulnerability arises from the mishandling of the user_pass property in the common.php file. If exploited, this vulnerability can have severe consequences for user security.
Vulnerability Detail
The vulnerability in the Gravity Forms plugin allows an attacker to access hashed passwords due to the improper handling of the user_pass property in the common.php file. By making a specific call to $current_user->get($property), the plugin fails to consider user_pass as a special case. This oversight enables an attacker to retrieve hashed passwords, which can then be subjected to various attacks, such as brute-forcing or dictionary attacks. The impact of this vulnerability is significant, as it compromises the security of user accounts and can lead to unauthorized access to sensitive information.
How To Fix
Minimum fixed version
2.4.9
This is the first release that contains the fix.
composer require wp-premium/gravityforms:2.4.9Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the official patch by updating the Gravity Forms plugin to the latest version.
Conclusion
The Gravity Forms plugin prior to version 2.4.9 is vulnerable to a security issue that can lead to the leakage of hashed passwords. This vulnerability can have severe consequences for user security, as it compromises the integrity of user accounts and exposes sensitive information. To mitigate this risk, it is crucial to update the plugin to the latest version and reset the passwords of all users. For further assistance and support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for wp-premium/gravityforms →
FAQ
The Gravity Forms plugin is a WordPress plugin that allows users to create and manage advanced forms on their websites. It is widely used for collecting user data and simplifying the form creation process.
This vulnerability can lead to the leakage of hashed passwords, compromising the security of user accounts. Attackers can use the leaked passwords for various malicious purposes, such as unauthorized access to sensitive information.
To fix this vulnerability, update the Gravity Forms plugin to version 2.4.9 or later. Additionally, it is recommended to reset the passwords of all users to mitigate any potential risks associated with the leaked hashed passwords.
No, there is no known workaround for this vulnerability. It is crucial to apply the official patch by updating the Gravity Forms plugin to the latest version.
For more information about this vulnerability, you can refer to the official advisory provided by the GitHub Advisory Database. Additionally, you can reach out to info@devnack.com for further support on vulnerability remediation.
Related vulnerabilities
Recent vulnerabilities recorded for wp-premium/gravityforms.
