Critical · published February 2, 2026
🚨 An unauthenticated password reset is a gift for attackers! With just a username, anyone could reset passwords for any user, even those with admin privileges. 🔥 Think of it like a restaurant where anyone can walk in, announce they’re someone else, and reorder their food without ever verifying their identity—completely bypassing the usual checks! This vulnerability could lead to complete account takeovers, allowing attackers to access sensitive information, change settings, or even lock legitimate users out of their accounts. It’s absolutely devastating, especially for administrators, as this grants unfettered access to the entire site!
Think of it like a restaurant where anyone can walk in, announce they’re someone else, and reorder their food without ever verifying their identity—completely bypassing the usual checks! The User Profile Builder WordPress plugin before version 3.15.2 lacks proper validation during the password reset process, allowing unauthenticated users to reset any account's password by knowing the username alone.
This vulnerability could lead to complete account takeovers, allowing attackers to access sensitive information, change settings, or even lock legitimate users out of their accounts. It’s absolutely devastating, especially for administrators, as this grants unfettered access to the entire site! Update the User Profile Builder plugin to version 3.15.2 or later immediately. Additionally, review user access settings and consider implementing more robust authentication measures for sensitive actions. Don't leave your door open! You've got this! Follow these steps, and you’ll be the hero that keeps your WordPress site secure! 🛡️