Critical · published September 24, 2024
🚨 A simple oversight allows attackers to change user credentials without breaking a sweat! This privilege escalation vulnerability affects all versions of the Donations by Charitable plugin up to 1.8.1.14. 🔥 Think of it like a hotel where the front desk has a guest list but forgets to check IDs before issuing room keys. Anyone could stroll in, change their booking, and even take over VIP suites without anyone batting an eye! What could happen? An attacker could waltz right in and reset email addresses and passwords for any user account, including those of administrators. This means they can easily log in and wreak havoc, compromising the entire fundraising platform and its sensitive data!
Think of it like a hotel where the front desk has a guest list but forgets to check IDs before issuing room keys. Anyone could stroll in, change their booking, and even take over VIP suites without anyone batting an eye! The vulnerability lies in the update_core_user() function of the Donations by Charitable plugin, which fails to properly authenticate a user when the ID parameter is provided. This allows unauthenticated attackers to execute unauthorized changes to user accounts.
What could happen? An attacker could waltz right in and reset email addresses and passwords for any user account, including those of administrators. This means they can easily log in and wreak havoc, compromising the entire fundraising platform and its sensitive data! To protect your site, update the Donations by Charitable plugin to version 1.8.1.15 or later immediately. Additionally, review user permissions and consider implementing stricter verification procedures for sensitive actions. Don't skip this step! You've got this! Follow these steps, and you'll have your site secured in no time. 🛡️