This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login.
Read the full analysis โ
Q1What is this vulnerability? (Essence + Consequences)
๐จ **Essence**: A critical authentication bypass in WPCOM Member. ๐ **Consequences**: Attackers can impersonate ANY existing user without credentials. Total loss of account integrity.
Q2Root Cause? (CWE/Flaw)
๐ก๏ธ **CWE-287**: Improper Authentication. ๐ **Flaw**: Weak validation of the `user_phone` parameter during login. The system trusts input without verifying identity properly.
Q3Who is affected? (Versions/Components)
๐ข **Vendor**: whyun. ๐ฆ **Product**: WPCOM Member (WordPress Plugin). ๐ **Affected**: Versions **1.7.5 and earlier**. If you are on 1.7.5 or lower, you are at risk!
Q4What can hackers do? (Privileges/Data)
๐ **Privileges**: Full account takeover. ๐ **Data**: Access to all user data, posts, and settings associated with the impersonated account. No password needed!
๐ต๏ธ **Public Exp?**: No specific PoC code provided in data. โ ๏ธ **Risk**: High likelihood of wild exploitation due to low complexity and remote nature. Assume it is being exploited.
Q7How to self-check? (Features/Scanning)
๐ **Check**: Scan for WPCOM Member plugin. ๐ **Version**: Verify if version โค 1.7.5. ๐ ๏ธ **Tool**: Use WordPress security scanners or check plugin directory details.
Q8Is it fixed officially? (Patch/Mitigation)
โ **Fixed?**: Yes. ๐ **Patch**: Reference changeset 3248208. ๐ **Action**: Update to the latest version immediately. WordFence also tracks this vulnerability.
Q9What if no patch? (Workaround)
๐ง **No Patch?**: Disable the plugin entirely. ๐ **Mitigation**: Remove WPCOM Member if not essential. Monitor logs for suspicious login attempts via phone number.
Q10Is it urgent? (Priority Suggestion)
๐ฅ **Priority**: CRITICAL (CVSS 9.8). ๐จ **Urgency**: Patch NOW. This is a remote, unauthenticated takeover. Do not wait. Protect your users' accounts immediately.