CVE-2023-1888: Directorist <= 7.5.4 - Authenticated (Subscriber+) Arbitrary User Password Reset to Privilege Escalation
The Directorist plugin for WordPress is vulnerable to an arbitrary user password reset in versions up to, and including, 7.5.4. This is due to a lack of validation checks within login.php. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to reset the password of an arbitrary user and gain elevated (e.g., administrator) privileges.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-1888?
CVE-2023-1888 is a vulnerability in the Directorist plugin for WordPress that allows authenticated attackers to perform arbitrary user password resets.
What is the severity of CVE-2023-1888?
CVE-2023-1888 has a severity rating of 8.8 (high).
How does CVE-2023-1888 affect the Directorist plugin for WordPress?
CVE-2023-1888 affects versions up to and including 7.5.4 of the Directorist plugin for WordPress.
How can authenticated attackers exploit CVE-2023-1888?
Authenticated attackers with subscriber-level permissions and above can exploit CVE-2023-1888 to reset the passwords of arbitrary users.
Are there any references for CVE-2023-1888?
Yes, you can find references for CVE-2023-1888 at the following links: [1] https://plugins.trac.wordpress.org/changeset/2920100/directorist, [2] https://www.wordfence.com/threat-intel/vulnerabilities/id/01943559-e05b-4dca-b322-d880b2729ee7?source=cve