Critical · published September 6, 2024
🚨 Unauthenticated attackers can sneak in and change user passwords! The WP-Recall plugin for WordPress has a privilege escalation flaw that could let anyone hijack accounts by just supplying an email during new order creation. 🔥 Think of it like a restaurant that lets anyone place an order under someone else's name without checking their ID. Someone could walk in and, without any proof, tell the chef to redo a meal for a different guest! This vulnerability is absolutely devastating! An attacker can take over user accounts, potentially accessing sensitive information or making unauthorized transactions. With the commerce add-on enabled, the risk escalates, putting user data and transactions in serious jeopardy.
Think of it like a restaurant that lets anyone place an order under someone else's name without checking their ID. Someone could walk in and, without any proof, tell the chef to redo a meal for a different guest! The WP-Recall plugin does not properly verify a user's identity during new order creation, allowing unauthenticated users to manipulate the user_email field and change passwords for any account linked to that email.
This vulnerability is absolutely devastating! An attacker can take over user accounts, potentially accessing sensitive information or making unauthorized transactions. With the commerce add-on enabled, the risk escalates, putting user data and transactions in serious jeopardy. Immediate action is crucial! Update the WP-Recall plugin to version 16.26.9 or later to close this gap. Additionally, review your user account settings and monitor any unauthorized access attempts. You've got this! Follow these steps, and you'll have your WordPress site fortified in no time! 🛡️