admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-28 01:04:30 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2021/CVE-2021-24655.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

939 B
Raw Blame History

CVE-2021-24655

Description

The WP User Manager WordPress plugin before 2.6.3 does not ensure that the user ID to reset the password of is related to the reset key given. As a result, any authenticated user can reset the password (to an arbitrary value) of any user knowing only their ID, and gain access to their account.

POC

Reference

Github

No PoCs found on GitHub currently.