CVE-2024-8794: BA Book Everything <= 1.6.20 - Unauthenticated Arbitrary User Password Reset
The BA Book Everything plugin for WordPress is vulnerable to arbitrary password reset in all versions up to, and including, 1.6.20. This is due to the resetuserpassword() function not verifying a user's identity prior to setting a password. This makes it possible for unauthenticated attackers to reset any user's passwords, including administrators. It's important to note that the attacker will not have access to the generated password, therefore, privilege escalation is not possible.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8794?
The severity of CVE-2024-8794 is considered high due to the potential for unauthorized password resets.
How do I fix CVE-2024-8794?
To fix CVE-2024-8794, update the BA Book Everything plugin to version 1.6.21 or later.
What versions are affected by CVE-2024-8794?
CVE-2024-8794 affects all versions of the BA Book Everything plugin up to and including 1.6.20.
Can CVE-2024-8794 be exploited remotely?
Yes, CVE-2024-8794 can be exploited remotely as it allows unauthenticated users to reset passwords.
What should I do if I cannot update the plugin due to compatibility issues related to CVE-2024-8794?
If you cannot update the plugin due to compatibility issues, consider disabling the plugin until a fix can be applied.