Description
The User Profile Builder WordPress plugin before 3.15.2 does not have a proper password reset process, allowing a few unauthenticated requests to reset the password of any user by knowing their username, such as administrator ones, and therefore gain access to their account
Problem types
CWE-269 Improper Privilege Management
Product status
1.1.27 (semver) before 3.15.2
Credits
Drew Webber (mcdruid)
WPScan
References
wpscan.com/...rability/344cb1b1-342e-44b2-ae4a-3bb31be56b22/