nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2021-24527 CVE-2021-24527
CRITICALNuclei
Profile Builder < 3.4.9 - Admin Access via Password Reset
Record summary
CVE-2021-24527 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.
Description
The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.9 has a bug allowing any user to reset the password of the admin of the blog, and gain unauthorised access, due to a bypass in the way the reset key is checked. Furthermore, the admin will not be notified of such change by email for example.
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · Jan 11, 2023 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
Available material
- Nuclei templates
- 1
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
User Registration & User Profile – Profile Builder | CVE List | 3.4.9 to < 3.4.9 | affected |
profile_builderBrowse cozmoslabs / profile_builder | VulnCheck | Version data not supplied | |
Nuclei templates
1ProjectDiscoveryCRITICALProfile Builder < 3.4.9 - Improper AuthenticationCVSS 9.8
The Profile Builder plugin before 3.4.9 for WordPress allows unauthenticated attackers to gain administrative access by exploiting an improper authentication vulnerability in the password reset functionality. An attacker can reset the password of any user, including administrators, without proper authorization, leading to a complete site compromise.
Impact
Unauthenticated attackers can reset passwords for any user including administrators without authorization, leading to complete site compromise and account takeover.
Remediation
Fixed in 3.4.9
WeaknessesCWE-287
AuthorsSourabh-Sahu
Template tagscvecve2021wpwp-pluginwordpressprofile-buildervkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:cozmoslabs:profile_builder:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/c142e738-bc4b-4058-a03e-1be6fca47207/ https://nvd.nist.gov/vuln/detail/CVE-2021-24527
Source: ProjectDiscovery
References
2wpscan.com
https://wpscan.com/vulnerability/c142e738-bc4b-4058-a03e-1be6fca47207