Critical · published October 16, 2025
🚨 An unauthenticated attacker can change user passwords with a pinpointed URL! The Truelysell Core plugin for WordPress is letting this vulnerability slip right through the door! 🔥 This is like giving out the master key to a hotel just because someone asked for it — if they know which room (or page) to target, they can waltz right in and take control of any guest's stay! An attacker could easily change user passwords, potentially taking over administrator accounts without breaking a sweat. This scenario could lead to complete control over your WordPress site, leaving your data exposed and your reputation at stake!
This is like giving out the master key to a hotel just because someone asked for it — if they know which room (or page) to target, they can waltz right in and take control of any guest's stay! The vulnerability arises from user-controlled access to objects, allowing unauthorized users to bypass crucial authorization checks when using the 'truelysell_edit_staff' shortcode. This flaw affects versions up to and including 1.8.6 of the Truelysell Core plugin for WordPress.
An attacker could easily change user passwords, potentially taking over administrator accounts without breaking a sweat. This scenario could lead to complete control over your WordPress site, leaving your data exposed and your reputation at stake! Immediate action is required: update the Truelysell Core plugin to version 1.8.7 or later to close this door. Also, review your user permissions and consider additional security measures, like a firewall, to safeguard against unauthorized access. You've got this! Just follow the steps, and you'll be back in the driver's seat in no time! 🛡️