RegistrationMagic <=6.0.2.6 Unauthenticated Privilege Escalation via Password Recovery

Key Information: 1. Vulnerability Name: - RegistrationMagic - User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery 2. Vulnerability Description: - Describes an unauthenticated privilege escalation vulnerability in the RegistrationMagic plugin across all versions (including 6.0.2.6), caused by improper validation of password reset tokens before resetting passwords. This allows unauthorized attackers to reset passwords for any user, including administrators, thereby gaining access to those accounts. 3. Vulnerability Rating: - CVSS 3.1: 9.8 (Critical) - CVSS 2.0: 9.8 (Critical) 4. Public Release Date: - November 8, 2024 5. Update Date: - November 9, 2024 6. Researcher: - shaman0x01 - Shaman Red Team 7. Fix Status: - Fixed - Users are advised to update to version 6.0.2.7 or later, which includes the fix. 8. Affected Versions: - <= 6.0.2.6 9. Fixed Version: - 6.0.2.7 10. Reference Links: - plugins.trac.wordpress.org - plugins.trac.wordpress.org - plugins.trac.wordpress.org 11. Vulnerability Type: - Improper Handling of Missing Values 12. Copyright and Licensing: - Copyright and licensing information provided by Defiant Inc. and MITRE Corporation. 13. Vulnerability Database: - The Wordfence Intelligence WordPress Vulnerability Database is completely free and accessible via API for querying and searching. 14. Recommendation: - Install the Wordfence plugin to immediately receive notifications if your website is affected by any vulnerabilities added to the database. Call to Action: Learn More: Explore Wordfence’s free and commercial API access, as well as free webhook integrations. Get Wordfence: Install the Wordfence plugin to receive immediate alerts if your website is impacted by any vulnerabilities. Documentation: Review the documentation for the Wordfence Intelligence WordPress Vulnerability Database to learn how to access and query vulnerability data via API.

Goal Reached Thanks to every supporter — we hit 100%!

RegistrationMagic <=6.0.2.6 Unauthenticated Privilege Escalation via Password Recovery

More from this source