VulnerabilityModified
CVE-2021-24655
As a result, any authenticated user can reset the password (to an arbitrary value) of any user knowing only their ID, and gain access to their account.
HIGH 7.5EPSS 1.04%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.04%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The WP User Manager WordPress plugin before 2.6.3 does not ensure that the user ID to reset the password of is related to the reset key given. As a result, any authenticated user can reset the password (to an arbitrary value) of any user knowing only their ID, and gain access to their account.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 1.04% probability · 62th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-639
- Affected
- wpusermanager/wp user manager
- Source
- contact@wpscan.com
References
- https://wpscan.com/vulnerability/cce03550-7f65-4172-819e-025755fb541fExploit, Third Party Advisory
- https://wpscan.com/vulnerability/cce03550-7f65-4172-819e-025755fb541fExploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.