CVE-2024-38770: 
WordPress vulnerability analysis and mitigation

The Backup and Staging by WP Time Capsule plugin versions through 1.22.20 contains an Improper Privilege Management vulnerability that allows for Authentication Bypass and Privilege Escalation. The vulnerability was discovered and reported by Dave Jong from Patchstack on July 2, 2024, and was publicly disclosed on July 13, 2024. This critical security issue affects over 20,000 WordPress installations (Patchstack Article).

The vulnerability received a Critical CVSS v3.1 score of 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The security flaw stems from a loose comparison check ('!=') instead of strict comparison ('!==') when verifying the authorized API key, enabling type juggling attacks. This vulnerability is tracked as CVE-2024-38770 and is classified under CWE-269 (Improper Privilege Management) (NVD, Patchstack Database).

The vulnerability allows an unauthenticated user to log in as an administrator if the plugin's connection to the WpTimecapsule website has been configured. This could lead to complete website compromise, as attackers could gain administrative access and take full control of the affected WordPress installation (Patchstack Article).

The vulnerability is known to be actively exploited in the wild. According to Patchstack, more than 9,500 attempts to exploit vulnerable versions of the plugin have been blocked since the deployment of their virtual patch (Patchstack Article).

Website administrators are strongly advised to update to version 1.22.21 or later immediately. For immediate protection, Patchstack has issued a virtual patch that blocks any requests containing the vulnerable 'AUTO_UPDATE_CHECK' type along with an authorization parameter (Patchstack Database).