CVE-2024-10508
CRITICALRegistrationMagic < 6.0.2.7 - Unauthenticated Privilege Escalation via Password Reset Token Validation Bypass
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2024-10508. PoCs published by Jenderal92, ubaydev.
AI-analyzed exploit summary The repository contains a Python script that scans WordPress sites for the presence of the vulnerable RegistrationMagic plugin (version 6.0.2.6) by checking the readme.txt file. It does not exploit the vulnerability but identifies potentially vulnerable targets.
Description
The RegistrationMagic – User Registration Plugin with Custom Registration Forms plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0.2.6. This is due to the plugin not properly validating the password reset token prior to updating a user's password. This makes it possible for unauthenticated attackers to reset the password of arbitrary users, including administrators, and gain access to these accounts.
Exploits (2)
The repository contains a Python script that scans WordPress sites for the presence of the vulnerable RegistrationMagic plugin (version 6.0.2.6) by checking the readme.txt file. It does not exploit the vulnerability but identifies potentially vulnerable targets.
This repository provides a detailed technical writeup for CVE-2024-10508, an unauthenticated privilege escalation vulnerability in RegistrationMagic WordPress plugin. The vulnerability allows attackers to reset passwords of arbitrary users, including administrators, due to improper validation of password reset tokens.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H