CVE-2024-8292

CRITICAL

WP-Recall < 16.26.9 - Unauthenticated Privilege Escalation via Order Creation

Title source: llm
STIX 2.1

Description

The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to privilege escalation/account takeover in all versions up to, and including, 16.26.8. This is due to to plugin not properly verifying a user's identity during new order creation. This makes it possible for unauthenticated attackers to supply any email through the user_email field and update the password for that user during new order creation. This requires the commerce addon to be enabled in order to exploit.

References (5)

Core 5

Scores

CVSS v3 9.8
EPSS 0.0060
EPSS Percentile 44.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-639
Status published
Products (2)
plechevandrey/wp-recall < 16.26.9
wppost/WP-Recall – Registration, Profile, Commerce & More < 16.26.8
Published Sep 06, 2024
Tracked Since Feb 18, 2026