by Kastro
Paper/Archive/CVE-2021-24527

CVE-2021-24527

Unknown User Registration & User Profile – Profile Builder — Profile Builder < 3.4.9 - Admin Access via Password Reset

EPSS 9%CVSS 9.8
critical.is priorityof 100
48
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 95.2.952 × 2019.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.9 has a bug allowing any user to reset the password of the admin of the blog, and gain unauthorised access, due to a bypass in the way the reset key is checked. Furthermore, the admin will not be notified of such change by email for example.

Affected

ProductAffectedFixed inSource
User Registration & User Profile – Profile Builder3.4.9 – < 3.4.93.4.9CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refwpscan.com/vulnerability/c142e738-bc4b-4058-a03e-1be6fca47207