CVE-2024-13446: Workreap <= 3.2.5 - Unauthenticated Privilege Escalation via Account Takeover
The Workreap plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.2.5. This is due to the plugin not properly validating a user's identity prior to (1) performing a social auto-login or (2) updating their profile details (e.g. password). This makes it possible for unauthenticated attackers to (1) login as an arbitrary user if their email address is known or (2) change an arbitrary user's password, including administrators, and leverage that to gain access to their account. NOTE: This vulnerability was partially fixed in version 3.2.5.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-13446?
CVE-2024-13446 has a high severity rating due to the potential for privilege escalation and account takeover.
How do I fix CVE-2024-13446?
To fix CVE-2024-13446, update the Workreap plugin to the latest version beyond 3.2.5.
Who is affected by CVE-2024-13446?
CVE-2024-13446 affects all versions of the Workreap plugin for WordPress up to and including version 3.2.5.
What causes CVE-2024-13446?
CVE-2024-13446 is caused by improper validation of user identity during social auto-login and profile updates.
How can I prevent CVE-2024-13446 from being exploited?
To prevent exploitation of CVE-2024-13446, ensure timely updates of the Workreap plugin and review user permissions frequently.