CVE-2024-8428

The ForumWP – Forum & Discussion Board Plugin plugin for WordPress is vulnerable to Privilege Escalation via Insecure Direct Object Reference in all versions up to, and including, 2.0.2 via the submit_form_handler due to missing validation on the 'user_id' user controlled key. This makes it possible for authenticated attackers, with subscriber-level access and above, to change the email address of administrative user accounts which can then be leveraged to reset the administrative users password and gain access to their account.
Configurations

Configuration 1 (hide)

cpe:2.3:a:ultimatemember:forumwp:*:*:*:*:*:wordpress:*:*

History

26 Sep 2024, 21:58

Type Values Removed Values Added
References () https://plugins.trac.wordpress.org/browser/forumwp/trunk/includes/frontend/class-actions-listener.php#L179 - () https://plugins.trac.wordpress.org/browser/forumwp/trunk/includes/frontend/class-actions-listener.php#L179 - Product
References () https://www.wordfence.com/threat-intel/vulnerabilities/id/b5818587-0a52-4734-8f75-263b4ab5020e?source=cve - () https://www.wordfence.com/threat-intel/vulnerabilities/id/b5818587-0a52-4734-8f75-263b4ab5020e?source=cve - Third Party Advisory
First Time Ultimatemember
Ultimatemember forumwp
CPE cpe:2.3:a:ultimatemember:forumwp:*:*:*:*:*:wordpress:*:*
Summary
  • (es) El complemento ForumWP – Forum & Discussion Board Plugin para WordPress es vulnerable a la escalada de privilegios a través de una referencia directa a objetos insegura en todas las versiones hasta la 2.0.2 incluida a través de submission_form_handler debido a la falta de validación en la clave controlada por el usuario 'user_id'. Esto permite que atacantes autenticados, con acceso de nivel de suscriptor y superior, cambien la dirección de correo electrónico de las cuentas de usuarios administrativos, lo que luego puede aprovecharse para restablecer la contraseña de los usuarios administrativos y obtener acceso a su cuenta.

06 Sep 2024, 14:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-09-06 14:15

Updated : 2024-09-26 21:58


NVD link : CVE-2024-8428

Mitre link : CVE-2024-8428

CVE.ORG link : CVE-2024-8428


JSON object : View

Products Affected

ultimatemember

  • forumwp
CWE
CWE-639

Authorization Bypass Through User-Controlled Key