WordPress Plugin Vulnerability Report – Ad Inserter – Unauthenticated Sensitive Information Exposure – CVE-2023-4668, CVE-2023-4645

By Your WP Guy | September 22, 2023

Plugin Name: Ad Inserter

Key Information:

Software Type: Plugin
Software Slug: ad-inserter
Software Status: Active
Software Author: Spacetime
Software Downloads: 13,908,300
Active Installs: 300,000
Last Updated: September 22, 2023
Patched Versions: 2.7.31
Affected Versions: 2.7.30

Vulnerability Details:

Name: Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai-debug-processing-fe
- Type: Missing Authorization
- CVE: CVE-2023-4668
- CVSS Score: 5.3 (Medium)
- Publicly Published: September 22, 2023
- Researcher: Marco Wotschka
- Description: This vulnerability allows unauthenticated attackers to extract sensitive data including installed plugins (present and active), active theme, various plugin settings, WordPress version, as well as some server settings such as memory limit, installation paths via the ai-debug-processing-fe URL parameter.
Name: Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai_ajax
- Type: Missing Authorization
- CVE: CVE-2023-4645
- CVSS Score: 5.3 (Medium)
- Publicly Published: September 22, 2023
- Researcher: Marco Wotschka
- Description: This vulnerability enables unauthenticated attackers to extract sensitive data such as post titles and slugs (including those of protected posts along with their passwords), usernames, available roles, the plugin license key provided the remote debugging option is enabled.

Summary:

The Ad Inserter plugin for WordPress has vulnerabilities in version 2.7.30 that expose sensitive information to unauthenticated attackers. These vulnerabilities have been patched in version 2.7.31.

Detailed Overview:

Discovered by Marco Wotschka, these vulnerabilities located in the ai-debug-processing-fe URL parameter and ai_ajax function expose sensitive data such as installed plugins, active theme, WordPress version, server settings, post titles and slugs, usernames, and available roles. The exposure of such information can lead to further exploitation of the affected sites. The plugin developers have promptly released a patch, addressing these vulnerabilities in version 2.7.31.

Advice for Users:

Immediate Action: Users are encouraged to update to the patched version 2.7.31 immediately to protect their sites.
Check for Signs of Vulnerability: Monitor user activity, check server logs, and review site content for any unauthorized changes or access.
Alternate Plugins: While a patch is available, users might consider plugins that offer similar functionality as a precaution.
Stay Updated: Always ensure that your plugins are updated to the latest versions to avoid vulnerabilities.

Conclusion:

The prompt response from the Ad Inserter plugin developers to patch this vulnerability underscores the importance of timely updates. Users are advised to ensure that they are running version 2.7.31 or later to secure their WordPress installations.

References:

Detailed Report:

Keeping your WordPress website secure is a constant battle. New vulnerabilities in popular plugins emerge frequently, exposing millions of sites to potential exploits. This is the case with a serious vulnerability recently discovered in Ad Inserter, one of the most widely used WordPress ad management plugins. If your site runs this plugin, you need to take action immediately to avoid putting your site at risk. In this post, we’ll cover everything you need to know about the vulnerability, how to update Ad Inserter, additional precautions you can take, and why staying on top of security threats like this is so important for the safety of your website.

Overview of the Ad Inserter Plugin

Ad Inserter is a premium WordPress plugin with over 13 million downloads and 300,000 active installs. It provides site owners granular control over placing ads, enabling features like ad rotation, display frequency capping, and advanced targeting options. For site owners running Google AdSense, display ads, or affiliate promotions, Ad Inserter is a popular choice to optimize ad placements and earnings.

Details on the Discovered Vulnerability

On September 22, 2023, security researcher Marco Wotschka publicly disclosed two critical vulnerabilities in Ad Inserter versions 2.7.30 and earlier:

CVE-2023-4668 - Unauthenticated sensitive information exposure via the ai-debug-processing-fe parameter. This vulnerability allows attackers to extract info like installed plugins, active theme, plugin settings, WordPress version, and server settings.
CVE-2023-4645 - Unauthenticated sensitive information exposure via the ai_ajax function. This vulnerability reveals post titles/slugs, usernames, available roles, and potentially the plugin license key.

Both issues enable unauthenticated access to sensitive information, posing a serious security threat to any site running the affected versions.

Impacts of Potential Exploitation

If exploited, these vulnerabilities would grant attackers significant visibility into a site's technical configuration, users, and content. They could use this information to identify other potential vulnerabilities to exploit. Attackers could also access private post titles/slugs and author info, exposing private data.

The exposure of plugin settings and WordPress version info would help attackers fingerprint sites to craft targeted attacks. With nearly 300,000 sites actively running vulnerable versions, this poses a widespread threat.

Updating Ad Inserter to Patch Vulnerability

The developer of Ad Inserter has patched these issues in version 2.7.31. Sites using Ad Inserter should update to this latest version immediately to secure their plugin and prevent potential attacks.

To update Ad Inserter:

Log in to your WordPress dashboard.
Go to Plugins > Installed Plugins.
Find Ad Inserter and click Update to 2.7.31.
Click Activate to enable the updated plugin.

Additionally, check your site content and users for any unauthorized changes as a precaution. Consider adding additional security plugins like Wordfence to protect your site.

History of Ad Inserter Vulnerabilities

This is not the first vulnerability found in Ad Inserter. There have been 8 other vulnerabilities reported in the plugin since May 2015, most recently in March 2021. This reinforces the importance of promptly updating Ad Inserter when new versions are released to mitigate security issues.

Importance of Staying on Top of Vulnerabilities

For small business owners running WordPress sites, staying on top of vulnerabilities in plugins like Ad Inserter can feel overwhelming. However, ignoring or delaying critical security updates leaves your site at serious risk of attack and data breaches.

Make sure to subscribe to plugin update notifications, monitor security bulletins, and schedule regular WordPress maintenance routines to keep plugins updated. Also consider enlisting a managed WordPress host or developer to handle security monitoring and updates for you.

Neglecting your site's security can result in your site being down for hours, losing valuable business, search engine penalties, and worse. Protecting your WordPress site and keeping plugins like Ad Inserter updated is well worth the effort.

Conclusion: Update Ad Inserter Now to Protect Your Site

The vulnerabilities uncovered in the Ad Inserter plugin pose a severe security risk for the hundreds of thousands of sites relying on it. Updating to the latest patched version is critical to safeguard your site from potential exploits or data breaches. Take action now to update Ad Inserter, check your site for any suspicious activity, and commit to ongoing security maintenance. Your business and your users depend on it.

As a business owner, you don't have time to constantly monitor for WordPress vulnerabilities like this. At Your WP Guy, we become your outsourced IT team to handle security, updates, maintenance and support. Let us fully audit your site and plugins to assess any impact from this issue. We'll update everything to patched versions so you can rest easy knowing your site is locked down.

Focus on your business goals while we focus on your WordPress site's security. Chat with us anytime during business hours, schedule a call or call 678-995-5169 for a free consultation on securing your online presence.

WordPress Plugin Vulnerability Report – Ad Inserter – Unauthenticated Sensitive Information Exposure – CVE-2023-4668, CVE-2023-4645 FAQs

What vulnerabilities were discovered in the Ad Inserter plugin?

The Ad Inserter plugin for WordPress had two vulnerabilities in version 2.7.30. The first, identified as CVE-2023-4668, allowed unauthenticated attackers to extract sensitive data such as installed plugins, active theme, WordPress version, various plugin settings, and server settings via the ai-debug-processing-fe URL parameter. The second, labeled as CVE-2023-4645, enabled attackers to pull information like post titles and slugs (including protected posts and their passwords), usernames, available roles, and potentially the plugin license key if remote debugging was enabled.

Both vulnerabilities were related to missing authorization, meaning they could be exploited without requiring a login or other authentication. They were disclosed and patched in version 2.7.31. Users are encouraged to update to this version to protect their sites.

What can attackers potentially do with the exposed information?

Attackers who exploit these vulnerabilities gain significant visibility into the technical setup and content of a site. With information about installed plugins, WordPress version, and server settings, they can identify other potential vulnerabilities or weaknesses in the site's security. Gaining access to private post titles, slugs, and author details exposes confidential data which can be used for nefarious purposes.

Moreover, the exposure of plugin settings and WordPress version helps attackers to "fingerprint" sites, allowing them to craft more targeted and sophisticated attacks. This makes the vulnerability particularly risky for the vast number of sites running the affected versions of the Ad Inserter plugin.

How has the developer responded to the discovered vulnerabilities?

The developer of the Ad Inserter plugin responded promptly to the vulnerabilities once they were made public. They released a patch in version 2.7.31 that addresses these security issues. All users of the plugin are urged to update to this version immediately to ensure the security of their websites. This swift action from the developer underscores the importance of timely updates and staying proactive in the face of potential security threats.

Moreover, the quick resolution helps maintain trust with the user base and highlights the developer's commitment to safeguarding their product and its users against potential threats.

How can users protect their sites from these vulnerabilities?

To protect their websites from these vulnerabilities, users should take immediate action by updating the Ad Inserter plugin to the patched version 2.7.31. By doing this, they can safeguard their sites from potential exploitation associated with the disclosed vulnerabilities.

In addition to updating the plugin, users should monitor user activity, check server logs, and review site content for any unauthorized changes or signs of unauthorized access. It's also wise to consider using additional security plugins, such as Wordfence, to provide an extra layer of protection. Staying updated with the latest versions of all plugins and WordPress itself is crucial for overall website security.

Are there any alternatives to the Ad Inserter plugin that users can consider?

While the Ad Inserter plugin has been patched to address the current vulnerabilities, some users might be looking for alternatives as a precaution. There are several other plugins available that offer similar ad management functionalities for WordPress sites.

When considering an alternative, users should research the plugin's track record, read reviews, and ensure it has an active development team that promptly addresses security issues. Some well-regarded options include Advanced Ads, WP Quads, and AdRotate. However, it's essential to always vet any plugin before installation and to keep them updated to the latest versions.

What steps should be taken after updating the plugin?

After updating the Ad Inserter plugin to the patched version, users are advised to check their website content and user data for any signs of unauthorized changes or access. Monitoring server logs and user activity can provide insights into any potential malicious activity.

Additionally, it's beneficial to conduct a full website backup after updating. This ensures that there's a safe version to revert to in case any issues arise in the future. Users might also want to consider enhancing their overall site security by implementing stronger passwords, using two-factor authentication, and installing security plugins that monitor and protect against potential threats.

How can users stay informed about future vulnerabilities?

To stay informed about future vulnerabilities in plugins like Ad Inserter, users should subscribe to plugin update notifications and regularly monitor security bulletins. Joining WordPress communities, following trusted security blogs, and registering for updates from the plugin developers are all proactive ways to stay in the loop.

Additionally, regular WordPress maintenance routines, including checking for plugin updates, should be scheduled. Users might also consider opting for managed WordPress hosting or hiring a developer to handle security monitoring and updates, ensuring their site remains protected against emerging threats.

Have there been previous vulnerabilities associated with the Ad Inserter plugin?

Yes, this isn't the first instance of vulnerabilities being identified in the Ad Inserter plugin. There have been eight other vulnerabilities reported in the plugin since May 2015, with the most recent one being in March 2021. This history emphasizes the importance of regularly updating the Ad Inserter plugin whenever new versions are released, as updates often include patches for known security issues.

Regularly updating plugins, themes, and WordPress core can help mitigate potential security threats, ensuring that known vulnerabilities are patched and that websites remain protected.

Why is it crucial for website owners to address vulnerabilities promptly?

Addressing vulnerabilities as soon as they are discovered is vital for several reasons. First, vulnerabilities can serve as entry points for attackers, leading to unauthorized access, data breaches, defacement, and other malicious activities. This can result in the loss of sensitive information, financial penalties, reputational damage, and even legal consequences.

Second, unresolved vulnerabilities can lead to a compromised site being blacklisted by search engines or web browsers, impacting organic traffic and user trust. A compromised website can also be used as a launching point for attacks on other sites, potentially involving the site owner in a broader network of malicious activity.

Lastly, in the digital age, users value their privacy and data security. Failing to address vulnerabilities promptly can lead to a loss of trust among users and clients, impacting business and brand reputation in the long run.

What general practices should WordPress site owners adopt to maintain site security?

To maintain optimal security for WordPress sites, owners should:

Regularly update WordPress core, plugins, and themes to their latest versions. Updates often contain security patches for known vulnerabilities.
Use strong, unique passwords for the WordPress admin, database, and hosting account. Consider implementing two-factor authentication for an added layer of protection.
Regularly back up the website, ensuring there are recent copies available in case of emergencies.
Limit the number of user accounts with administrative access and ensure user roles are appropriately assigned.
Install trusted security plugins, like Wordfence or Sucuri Security, to monitor and defend the site against threats.
Avoid downloading plugins or themes from unauthorized or suspicious sources, as they might contain malware or hidden vulnerabilities.
Regularly conduct security audits and vulnerability assessments to identify potential weaknesses and take corrective action.

Adopting these practices can significantly reduce the risk of security breaches and help ensure the integrity and reputation of a WordPress site.

Share this post:

X (Twitter) Facebook Pinterest LinkedIn Email Reddit WhatsApp Pocket SMS

Posted in Security, Vulnerabilities and tagged 2.7.31, Active Installs, Ad Inserter, Ad Inserter Update, Ad Inserter Vulnerabilities, Ad Management, CVE-2023-4645, CVE-2023-4668, Data Breach, Information Exposure, Patched Version, Plugin Downloads, plugin security, Plugin Update, Plugin Vulnerability, Security Advisory., Security Bulletin, Security Maintenance, Security Monitoring, Security Plugins, Security Precaution, Security Researcher, Security Risk, Security Threat, Security Update, Sensitive Data, Site Content, Site Protection, Unauthenticated Access, Unauthorized Access, Update Notification, User Advice, vulnerability, Vulnerability Patch, Vulnerability Report, Website Maintenance, Website Protection, website safety, Website Security, Wordfence, WordPress Dashboard, WordPress Maintenance, WordPress plugin

Plugin Name: Ad Inserter

Key Information:

Vulnerability Details:

Summary:

Detailed Overview:

Advice for Users:

Conclusion:

References:

Detailed Report:

Overview of the Ad Inserter Plugin

Details on the Discovered Vulnerability

Impacts of Potential Exploitation

Updating Ad Inserter to Patch Vulnerability

To update Ad Inserter:

History of Ad Inserter Vulnerabilities

Importance of Staying on Top of Vulnerabilities

Conclusion: Update Ad Inserter Now to Protect Your Site

WordPress Plugin Vulnerability Report – Ad Inserter – Unauthenticated Sensitive Information Exposure – CVE-2023-4668, CVE-2023-4645 FAQs

What vulnerabilities were discovered in the Ad Inserter plugin?

What can attackers potentially do with the exposed information?

How has the developer responded to the discovered vulnerabilities?

How can users protect their sites from these vulnerabilities?

Are there any alternatives to the Ad Inserter plugin that users can consider?

What steps should be taken after updating the plugin?

How can users stay informed about future vulnerabilities?

Have there been previous vulnerabilities associated with the Ad Inserter plugin?

Why is it crucial for website owners to address vulnerabilities promptly?

What general practices should WordPress site owners adopt to maintain site security?

What general practices should WordPress site owners adopt to maintain site security?

Share this post:

Leave a Comment Cancel Reply

Recent Blog Posts

LiteSpeed Cache Vulnerability – Unauthenticated Sensitive Information Exposure via Log Files – CVE-2024-44000 | WordPress Plugin Vulnerability Report

Elementor Addon Elements Vulnerability – Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Parameters – CVE-2024-4401, CVE-2024-7122 | WordPress Plugin Vulnerability Report

The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid Vulnerability – Authenticated (Contributor+) Information Disclosure – CVE-2024-7418 | WordPress Plugin Vulnerability Report

Additional Resources

About Your WP Guy