admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-11-30 18:56:19 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2021/CVE-2021-24527.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

937 B
Raw Blame History

CVE-2021-24527

Description

The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.9 has a bug allowing any user to reset the password of the admin of the blog, and gain unauthorised access, due to a bypass in the way the reset key is checked. Furthermore, the admin will not be notified of such change by email for example.

POC

Reference

Github

No PoCs found on GitHub currently.