CVE-2023-0889: TF Random Numbers < 2.0.1 - Subscriber+ Arbitrary Option Update

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-04-17 · updated 2026-06-17

Description

Themeflection Numbers WordPress plugin before 2.0.1 does not have authorisation and CSRF check in an AJAX action, and does not ensure that the options to be updated belong to the plugin. As a result, it could allow any authenticated users, such as subscriber, to update arbitrary blog options, such as enabling registration and set the default role to administrator

Affected products

Themeflection Numbers: before 2.0.1 — fixed in 2.0.1

How to fix

Upgrade to a fixed version: Themeflection Numbers 2.0.1. Check the vendor advisory for mitigations.

References

https://wpscan.com/vulnerability/c39473a7-47fc-4bce-99ad-28d03f41e74e
https://wpscan.com/vulnerability/c39473a7-47fc-4bce-99ad-28d03f41e74e

Get alerted when CVE-2023-0889 or the next vulnerability affects your stack