Vulnerabilities > CVE-2021-24655 - Authorization Bypass Through User-Controlled Key vulnerability in Wpusermanager WP User Manager

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

high complexity

wpusermanager

CWE-639

NVD

Published: 2022-07-17

Updated: 2022-07-18

Summary

The WP User Manager WordPress plugin before 2.6.3 does not ensure that the user ID to reset the password of is related to the reset key given. As a result, any authenticated user can reset the password (to an arbitrary value) of any user knowing only their ID, and gain access to their account.

Vulnerable Configurations

Part	Description	Count
Application	Wpusermanager Wpusermanager WP User Manager 1.0.3 Wpusermanager WP User Manager 1.0.4 Wpusermanager WP User Manager 1.0.5 Wpusermanager WP User Manager 1.1.0 Wpusermanager WP User Manager 1.2.0 Wpusermanager WP User Manager 1.2.1 Wpusermanager WP User Manager 1.2.3 Wpusermanager WP User Manager 1.2.4 Wpusermanager WP User Manager 1.2.5 Wpusermanager WP User Manager 1.2.6 Wpusermanager WP User Manager 1.2.7 Wpusermanager WP User Manager 1.2.8 Wpusermanager WP User Manager 1.2.9 Wpusermanager WP User Manager 1.2.10 Wpusermanager WP User Manager 1.3.0 Wpusermanager WP User Manager 1.3.1 Wpusermanager WP User Manager 1.4.0 Wpusermanager WP User Manager 1.4.1 Wpusermanager WP User Manager 1.4.2 Wpusermanager WP User Manager 1.4.3 Wpusermanager WP User Manager 2.0.0 Wpusermanager WP User Manager 2.0.1 Wpusermanager WP User Manager 2.0.2 Wpusermanager WP User Manager 2.0.3 Wpusermanager WP User Manager 2.0.4 Wpusermanager WP User Manager 2.0.5 Wpusermanager WP User Manager 2.0.6 Wpusermanager WP User Manager 2.0.7 Wpusermanager WP User Manager 2.0.8 Wpusermanager WP User Manager 2.0.9 Wpusermanager WP User Manager 2.1.0 Wpusermanager WP User Manager 2.1.1 Wpusermanager WP User Manager 2.1.2 Wpusermanager WP User Manager 2.1.3 Wpusermanager WP User Manager 2.1.4 Wpusermanager WP User Manager 2.1.5 Wpusermanager WP User Manager 2.1.6 Wpusermanager WP User Manager 2.1.7 Wpusermanager WP User Manager 2.1.8 Wpusermanager WP User Manager 2.1.9 Wpusermanager WP User Manager 2.1.10 Wpusermanager WP User Manager 2.1.11 Wpusermanager WP User Manager 2.1.12 Wpusermanager WP User Manager 2.1.13 Wpusermanager WP User Manager 2.1.14 Wpusermanager WP User Manager 2.2 Wpusermanager WP User Manager 2.2.1 Wpusermanager WP User Manager 2.2.2 Wpusermanager WP User Manager 2.2.3 Wpusermanager WP User Manager 2.3 Wpusermanager WP User Manager 2.3.1 Wpusermanager WP User Manager 2.3.2 Wpusermanager WP User Manager 2.3.3 Wpusermanager WP User Manager 2.3.4 Wpusermanager WP User Manager 2.3.5 Wpusermanager WP User Manager 2.3.6 Wpusermanager WP User Manager 2.3.7 Wpusermanager WP User Manager 2.3.8 Wpusermanager WP User Manager 2.3.9 Wpusermanager WP User Manager 2.3.10 Wpusermanager WP User Manager 2.3.11 Wpusermanager WP User Manager 2.3.12 Wpusermanager WP User Manager 2.3.13 Wpusermanager WP User Manager 2.4 Wpusermanager WP User Manager 2.4.1 Wpusermanager WP User Manager 2.4.2 Wpusermanager WP User Manager 2.5 Wpusermanager WP User Manager 2.6 Wpusermanager WP User Manager 2.6.1 Wpusermanager WP User Manager 2.6.2	70

Common Weakness Enumeration (CWE)

CWE-639 - Authorization Bypass Through User-Controlled Key

References

https://wpscan.com/vulnerability/cce03550-7f65-4172-819e-025755fb541f