CVE-2024-5006 – This vulnerability allows authenticated WordPre... (How to Fix)

Q: What is the severity of CVE-2024-5006?

CVE-2024-5006 has a CVSS score of 6.4 (MEDIUM). This vulnerability allows authenticated WordPress users with Contributor-level access or higher to inject malicious scripts into web pages using the Boostify Header Footer Builder for Elementor plugin. The scripts execute whenever users visit the compromised pages, enabling attackers to steal cookies, redirect users, or perform other malicious actions. All WordPress sites using vulnerable plugin versions are affected.

📋 TL;DR

This vulnerability allows authenticated WordPress users with Contributor-level access or higher to inject malicious scripts into web pages using the Boostify Header Footer Builder for Elementor plugin. The scripts execute whenever users visit the compromised pages, enabling attackers to steal cookies, redirect users, or perform other malicious actions. All WordPress sites using vulnerable plugin versions are affected.

💻 Affected Systems

Products:

Boostify Header Footer Builder for Elementor WordPress Plugin

Versions: All versions up to and including 1.3.2

Operating Systems: Any OS running WordPress

Default Config Vulnerable: ⚠️ Yes

Notes: Requires WordPress with Elementor and the vulnerable plugin installed. Contributor-level access or higher needed for exploitation.

📦 What is this software?

Boostify Header Footer Builder For Elementor by Woostify

View all CVEs affecting Boostify Header Footer Builder For Elementor →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Attackers could steal administrator session cookies, redirect users to malicious sites, deface websites, or install backdoors for persistent access.

🟠

Likely Case

Attackers with contributor accounts inject malicious scripts to steal user session data or redirect visitors to phishing sites.

🟢

If Mitigated

With proper user access controls and content security policies, impact is limited to defacement or minor data leakage.

🌐 Internet-Facing: HIGH

🏢 Internal Only: MEDIUM

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: LIKELY

Unauthenticated Exploit: ✅ No

Complexity: LOW

Exploitation requires authenticated access but is straightforward once attacker has contributor-level credentials.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: 1.3.3 or later

Vendor Advisory: https://wordpress.org/plugins/boostify-header-footer-builder/#developers

Restart Required: No

Instructions:

1. Log into WordPress admin panel. 2. Navigate to Plugins → Installed Plugins. 3. Find 'Boostify Header Footer Builder for Elementor'. 4. Click 'Update Now' if available. 5. Alternatively, download version 1.3.3+ from WordPress.org and manually update.

🔧 Temporary Workarounds

Disable vulnerable plugin

all

Temporarily disable the plugin until patched

wp plugin deactivate boostify-header-footer-builder

Restrict user roles

all

Limit contributor-level access to trusted users only

🧯 If You Can't Patch

Implement Content Security Policy (CSP) headers to restrict script execution
Regularly audit user accounts and remove unnecessary contributor-level access

🔍 How to Verify

Check if Vulnerable:

Check plugin version in WordPress admin → Plugins → Installed Plugins. If version is 1.3.2 or lower, you are vulnerable.

Check Version:

wp plugin get boostify-header-footer-builder --field=version

Verify Fix Applied:

After updating, verify plugin version is 1.3.3 or higher in WordPress admin panel.

📡 Detection & Monitoring

Log Indicators:

Unusual POST requests to plugin endpoints with 'size' parameter containing script tags
Multiple page edits by contributor-level users

Network Indicators:

Unexpected script sources loading from your domain
Suspicious outbound connections from your site

SIEM Query:

source="wordpress" AND (uri_path="/wp-admin/admin-ajax.php" OR uri_path CONTAINS "boostify") AND (param="size" AND value CONTAINS "<script")

📊 Metadata

CVE ID: CVE-2024-5006

CVSS v3 Score: 6.4 (MEDIUM)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

CWE: CWE-79

Published: June 5, 2024

Last Updated: November 21, 2024

🔗 References

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2024-5006, you might also want to check these: