Critical · published October 29, 2024
🚨 Unauthenticated attackers can log in as any user, including admins, in WordPress's Crypto plugin before version 2.18! 🔥 Think of it like a hotel guest who finds a way to access any room just by asking for a key without showing any ID. The hotel staff just hands them the key because they trust the request without checking credentials. This vulnerability is absolutely devastating! An attacker could waltz in as an administrator and change settings, access sensitive data, or lock out legitimate users. The potential for chaos is massive, and any website relying on this plugin is at serious risk!
Think of it like a hotel guest who finds a way to access any room just by asking for a key without showing any ID. The hotel staff just hands them the key because they trust the request without checking credentials. The Crypto plugin for WordPress has a flaw in the 'crypto_connect_ajax_process' function, allowing unauthenticated users to call the 'log_in' method. This enables them to bypass authentication entirely if they know a specific username.
This vulnerability is absolutely devastating! An attacker could waltz in as an administrator and change settings, access sensitive data, or lock out legitimate users. The potential for chaos is massive, and any website relying on this plugin is at serious risk! Update the Crypto plugin to version 2.19 immediately to resolve this critical issue. Additionally, audit user accounts and permissions to ensure no unauthorized access has occurred. ✨ You've got this! Take these steps, and you'll restore security to your site in no time! 🛡️