CVE-2021-39331 YITH Easy Login & Register Popup for WooCommerce <= 1.8.0 - Authentication Bypass via Password Reset
CriticalCVSS 9.8
- Published
- Unknown
- Updated
- Exploit status
- No public exploit known
Description
The YITH Easy Login & Register Popup for WooCommerce plugin for WordPress is vulnerable to authorization bypass via password reset in versions up to, and including, 1.8.0. This is due to the plugin failing to properly validate if a user is authorized to perform a password reset for the supplied user_login via the yith_welrp_form_action AJAX. This makes it possible for unauthenticated users to reset administrators password and then log in to a site using that account.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wordpress yith-easy-login-register-popup-for-woocommerce(WordPress) | < 1.8.1 | 1.8.1 |
References
- Wordfence Intelligence third-party-advisory
- www.cve.org