Critical · published February 8, 2025
🚨 An authentication bypass in the WP Directorybox Manager plugin lets attackers log in as any user, even administrators! 🔥 Think of it like a mischievous guest at a party who finds a forgotten guest list and simply walks in as the VIP without anyone checking their ID. No one noticed they're not on the list! This flaw allows unauthenticated attackers to gain unauthorized access to any user account, posing a huge risk of data theft and site manipulation. With administrator access, they could modify settings, delete content, or even turn the site into a phishing hub! This is absolutely devastating for your site's security!
Think of it like a mischievous guest at a party who finds a forgotten guest list and simply walks in as the VIP without anyone checking their ID. No one noticed they're not on the list! The vulnerability lies in the 'wp_dp_enquiry_agent_contact_form_submit_callback' function, which improperly validates user authentication, allowing malicious actors to log in as any existing user if they know the username.
This flaw allows unauthenticated attackers to gain unauthorized access to any user account, posing a huge risk of data theft and site manipulation. With administrator access, they could modify settings, delete content, or even turn the site into a phishing hub! This is absolutely devastating for your site's security! To secure your site, immediately update the WP Directorybox Manager plugin to version 2.6 or later. Additionally, review user accounts for any unauthorized changes and ensure that strong, unique passwords are being utilized across all accounts. 🛡️ You've got this! By following these steps, you'll reclaim control and keep your site safe! 💪✨