PT-2026-43507 · WordPress · Firebase Support & Chat Management
Farrukh Ziyaev
·
Published
2026-05-27
·
Updated
2026-06-04
·
CVE-2026-8787
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Firebase Support & Chat Management plugin for WordPress versions prior to 3.1.2
Description
An issue allows authenticated attackers with Subscriber-level access or higher to escalate privileges and achieve full account takeover. The
firebase auth() function authenticates requests based on the email provided in the user email POST parameter without verifying the ownership of that email, as it fails to validate the Firebase ID token signature, issuer, or audience. By submitting a target user's email address to the acb firebase auth AJAX action, an attacker can log in as any existing user, including an Administrator.Recommendations
Update to a version later than 3.1.1.
As a temporary workaround, restrict access to the
acb firebase auth AJAX action or avoid using the user email parameter until the update is applied.Fix
LPE
Improper Privilege Management
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Firebase Support & Chat Management