CalvinBackup/CVEs-PoC
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2026-05-31 05:59:31 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
b0e96c877abb080d7cf221c036336480ff266ccf
CVEs-PoC/2021/CVE-2021-24527.md
T
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

18 lines
937 B
Markdown
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
### [CVE-2021-24527](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24527)
![](https://img.shields.io/static/v1?label=Product&message=User%20Registration%20%26%20User%20Profile%20%E2%80%93%20Profile%20Builder&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=3.4.9%3C%203.4.9%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-287%20Improper%20Authentication&color=brighgreen)
### Description
The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.9 has a bug allowing any user to reset the password of the admin of the blog, and gain unauthorised access, due to a bypass in the way the reset key is checked. Furthermore, the admin will not be notified of such change by email for example.
### POC
#### Reference
- https://wpscan.com/vulnerability/c142e738-bc4b-4058-a03e-1be6fca47207
#### Github
No PoCs found on GitHub currently.
Reference in New Issue View Git Blame Copy Permalink