PT-2022-9444 · WordPress · Wp User Manager

Ayecode Ltd + 1 · Published 2022-07-17 · Updated 2022-07-18 · CVE-2021-24655

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WP User Manager versions prior to 2.6.3

Description The issue allows any authenticated user to reset the password of another user to an arbitrary value, knowing only their ID, and gain access to their account. This is because the plugin does not ensure that the user ID to reset the password of is related to the reset key given.

Recommendations For versions prior to 2.6.3, update to version 2.6.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the password reset functionality to minimize the risk of exploitation.

Exploit

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2021-24655

Affected Products

Wp User Manager

References · 4

• 🔥 https://wpscan.com/vulnerability/cce03550-7f65-4172-819e-025755fb541f · Exploit
• https://osv.dev/vulnerability/CVE-2021-24655 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-24655 · Security Note
• https://t.me/cibsecurity/46386 · Telegram Post