Advanced Forms < 1.6.9 - Subscriber+ Arbitrary User Email Address Update via IDOR

Insecure Direct Object Reference in edit function of Advanced Forms (Free & Pro) before 1.6.9 allows authenticated remote attacker to change arbitrary user's email address and request for reset password, which could lead to take over of WordPress's administrator account. To exploit this vulnerability, an attacker must register to obtain a valid WordPress's user and use such user to authenticate with WordPress in order to exploit the vulnerable edit function.

N/A

通过用户控制密钥绕过授权机制

WordPress 安全漏洞

WordPress是WordPress（Wordpress）基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。 WordPress Advanced Forms存在安全漏洞，该漏洞允许经过身份验证的远程攻击者更改任意用户的电子邮件地址并请求重置密码，这可能导致接管 WordPress 的管理员帐户。

N/A

N/A