Critical · published May 9, 2025
🚨 Unauthenticated access is the name of the game here! The WPBookit plugin for WordPress has a critical privilege escalation vulnerability that can let attackers change any user's email address, even admin accounts. 🔥 Imagine a restaurant where anyone can walk in and change the reservation names without any ID check—suddenly, a pesky intruder can sit at the chef's table! This vulnerability works just like that, allowing unauthorized individuals to alter user details without a second glance. An attacker can exploit this flaw to hijack administrator accounts, change passwords, and launch full-scale breaches. If an admin's email is switched, they could gain access to sensitive information and wreak havoc on the site—an absolute nightmare scenario!
Imagine a restaurant where anyone can walk in and change the reservation names without any ID check—suddenly, a pesky intruder can sit at the chef's table! This vulnerability works just like that, allowing unauthorized individuals to alter user details without a second glance. This privilege escalation occurs because the WPBookit plugin fails to validate user identity properly in the edit_newdata_customer_callback() function, enabling attackers to change email addresses and take control of accounts without being authenticated.
An attacker can exploit this flaw to hijack administrator accounts, change passwords, and launch full-scale breaches. If an admin's email is switched, they could gain access to sensitive information and wreak havoc on the site—an absolute nightmare scenario! Update the WPBookit plugin to the latest version immediately, as all versions up to and including 1.0.2 are affected. Implement a robust user identity verification process to ensure that only authorized changes are allowed. 🚀 You've got this! With these steps, you can secure your WordPress site and protect your users! 🛡️