CVE-2020-35947: 
WordPress vulnerability analysis and mitigation

An issue was discovered in the PageLayer plugin before version 1.1.2 for WordPress. The vulnerability was disclosed on May 28, 2020, affecting over 200,000 WordPress sites. The plugin had missing authorization checks in nearly all AJAX action endpoints, which allowed these actions to be executed by any authenticated user on the site (Wordfence Blog).

The vulnerability stemmed from improper implementation of nonce-based authorization, where the nonce was exposed in publicly viewable pages. This particularly impacted the pagelayer_save_content function, enabling page modifications and potential XSS attacks. The vulnerability received a CVSS v3.1 base score of 7.4 (High) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L (NVD).

The vulnerability allowed any authenticated user to modify pages and potentially execute cross-site scripting (XSS) attacks. This could lead to unauthorized content modifications and potential compromise of website security (Wordfence Blog).

The vulnerability was relatively easy to exploit as it only required an authenticated user account and could be executed without user interaction. The attack vector was network-accessible, making it possible to exploit remotely (NVD).

The vulnerability was patched in PageLayer version 1.1.2. Site administrators were advised to update to this version or later to mitigate the security risk (Wordfence Blog).