PT-2019-11674 · WordPress · Ultimate Member

Clément Cruchet · Published 2019-06-21 · Updated 2023-04-17 · CVE-2019-10270

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ultimate Member plugin version 2.39 for WordPress

Description An issue was discovered in the password reset functionality, allowing an attacker to reset the password of another user without proper verification. This is possible because the user id parameter is not properly correlated with the reset password key sent by email. An attacker can intercept the password modification request and modify the user id to target any user, including admins, potentially leading to account compromise and privilege escalation.

Recommendations For Ultimate Member plugin version 2.39, consider disabling the password reset functionality until a patch is available to prevent exploitation. Restrict access to the password modification request to minimize the risk of interception and modification of the user id parameter.

Exploit

Fix

Weakness Enumeration

CWE-640

Related Identifiers

CVE-2019-10270

Affected Products

Ultimate Member

References · 3

• 🔥 https://cxsecurity.com/issue/WLB-2019060101 · Exploit
• https://osv.dev/vulnerability/CVE-2019-10270 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-10270 · Security Note