PT-2024-16328 · WordPress · Registrationmagic

Khayal Farzaliyev + 1 · Published 2024-11-09 · Updated 2024-11-14 · CVE-2024-10508

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RegistrationMagic – User Registration Plugin with Custom Registration Forms plugin for WordPress versions up to, and including, 6.0.2.6

Description The issue is due to the plugin not properly validating the password reset token prior to updating a user's password. This makes it possible for unauthenticated attackers to reset the password of arbitrary users, including administrators, and gain access to these accounts. The vulnerability allows for privilege escalation via account takeover.

Recommendations Update to the latest version to secure your site. As a temporary workaround, consider restricting access to the password reset functionality until a patch is available. Avoid using the vulnerable password reset token until the issue is resolved.

Fix

Weakness Enumeration

CWE-230

Related Identifiers

CVE-2024-10508

Affected Products

Registrationmagic

References · 15

• https://nvd.nist.gov/vuln/detail/CVE-2024-10508 · Security Note
• https://osv.dev/vulnerability/CVE-2024-10508 · Vendor Advisory
• https://plugins.trac.wordpress.org/changeset/3181174/custom-registration-form-builder-with-submission-manager/trunk/public/controllers/class_rm_login_controller.php · Patch
• https://t.me/latest_high_impact_cve/1477 · Telegram Post
• https://twitter.com/cracbot/status/1856940189433958826 · Twitter Post
• https://t.me/cvedetector/10286 · Telegram Post
• https://twitter.com/transilienceai/status/1856567011783893072 · Twitter Post
• https://twitter.com/transilienceai/status/1856567027164406269 · Twitter Post
• https://t.me/latest_high_impact_cve/1476 · Telegram Post
• https://plugins.trac.wordpress.org/browser/custom-registration-form-builder-with-submission-manager/tags/6.0.2.6/public/controllers/class_rm_login_controller.php#L239 · Note
• https://twitter.com/CveFindCom/status/1855158900430864788 · Twitter Post
• https://plugins.trac.wordpress.org/browser/custom-registration-form-builder-with-submission-manager/tags/6.0.2.6/public/controllers/class_rm_login_controller.php#L241 · Note
• https://twitter.com/CVEnew/status/1855156235198202322 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/c4679fa7-be6b-4f50-8cdf-ff9822794f19?source=cve · Note
• https://twitter.com/transilienceai/status/1856566995849818545 · Twitter Post