CVE-2021-24527: Profile Builder < 3.4.9 - Admin Access via Password Reset
The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.9 has a bug allowing any user to reset the password of the admin of the blog, and gain unauthorised access, due to a bypass in the way the reset key is checked. Furthermore, the admin will not be notified of such change by email for example.
Other sources
The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.9 has a bug allowing any user to reset the password of the admin of the blog, and gain unauthorised access, due to a bypass in the way the reset key is checked. Furthermore, the admin will not be notified of such change by email for example.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-24527.
What is the severity of CVE-2021-24527?
The severity of CVE-2021-24527 is critical with a score of 9.8.
What is affected by CVE-2021-24527?
The User Registration & User Profile - Profile Builder WordPress plugin before version 3.4.9 is affected by CVE-2021-24527.
How does CVE-2021-24527 work?
CVE-2021-24527 allows any user to reset the password of the admin of the blog and gain unauthorized access due to a bypass in the way the reset key is checked.
How can I fix CVE-2021-24527?
To fix CVE-2021-24527, update the User Registration & User Profile - Profile Builder WordPress plugin to version 3.4.9 or later.