High · published November 7, 2025
⚡ Watch out! A sneaky flaw in the IDonate plugin allows a Subscriber to reset any user's password, including admins! 🚨 Think of this like a restaurant where a diner can walk into the kitchen and change the chef's password, allowing them to cook whatever they want! It's a recipe for chaos when low-level access can lead to full control. An attacker could easily gain access to sensitive admin areas and take complete control of the website, potentially changing crucial settings, stealing data, or even deleting important content. This could lead to devastating consequences for the site's integrity and its users.
Think of this like a restaurant where a diner can walk into the kitchen and change the chef's password, allowing them to cook whatever they want! It's a recipe for chaos when low-level access can lead to full control. The vulnerability in IDonate stems from a missing capability check in the idonate_donor_password() function, which allows authenticated users with minimal access to initiate password resets for any user, thereby escalating their privileges.
An attacker could easily gain access to sensitive admin areas and take complete control of the website, potentially changing crucial settings, stealing data, or even deleting important content. This could lead to devastating consequences for the site's integrity and its users. To protect your site, immediately update the IDonate plugin to version 2.1.10 or higher, where this vulnerability has been patched. Additionally, review your user roles and permissions to ensure that access levels are appropriately assigned. You've got this! Implement these changes and keep your site safe and sound. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| themeatelier/idonate | ≥ 2.1.5, < 2.1.10 | 2.1.10 |