CVE-2024-8794: BA Book Everything <= 1.6.20 - Unauthenticated Arbitrary User Password Reset
First published: Tue Sep 24 2024(Updated: )
The BA Book Everything plugin for WordPress is vulnerable to arbitrary password reset in all versions up to, and including, 1.6.20. This is due to the reset_user_password() function not verifying a user's identity prior to setting a password. This makes it possible for unauthenticated attackers to reset any user's passwords, including administrators. It's important to note that the attacker will not have access to the generated password, therefore, privilege escalation is not possible.
Credit: security@wordfence.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ba-booking Ba Book Everything | <1.6.21 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.wordfence.com/threat-intel/vulnerabilities/id/4e261b0e-5ca3-4f5c-acc0-41abee31b148?source=cve
- https://plugins.trac.wordpress.org/browser/ba-book-everything/tags/1.6.20/includes/class-babe-users.php#L266
- https://plugins.trac.wordpress.org/browser/ba-book-everything/tags/1.6.20/includes/class-babe-my-account.php#L610
- https://plugins.trac.wordpress.org/changeset/3152728/ba-book-everything/trunk/includes/class-babe-users.php
Frequently Asked Questions
What is the severity of CVE-2024-8794?
The severity of CVE-2024-8794 is considered high due to the potential for unauthorized password resets.
How do I fix CVE-2024-8794?
To fix CVE-2024-8794, update the BA Book Everything plugin to version 1.6.21 or later.
What versions are affected by CVE-2024-8794?
CVE-2024-8794 affects all versions of the BA Book Everything plugin up to and including 1.6.20.
Can CVE-2024-8794 be exploited remotely?
Yes, CVE-2024-8794 can be exploited remotely as it allows unauthenticated users to reset passwords.
What should I do if I cannot update the plugin due to compatibility issues related to CVE-2024-8794?
If you cannot update the plugin due to compatibility issues, consider disabling the plugin until a fix can be applied.
- agent/references
- agent/weakness
- agent/title
- agent/first-publish-date
- agent/type
- agent/description
- agent/severity
- agent/author
- agent/event
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/trending
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/ba-booking
- canonical/ba-booking ba book everything