CVE-2024-8794
Medium
Description
The BA Book Everything plugin for WordPress is vulnerable to arbitrary password reset in all versions up to, and including, 1.6.20. This is due to the reset_user_password() function not verifying a user's identity prior to setting a password. This makes it possible for unauthenticated attackers to reset any user's passwords, including administrators. It's important to note that the attacker will not have access to the generated password, therefore, privilege escalation is not possible.
SeverityMedium
CVSS5.3
Exploit probability—
ProductBa-booking Ba Book Everything
PublishedSep 24, 2024
First seenSep 24, 2024
Weakness typeCWE-620CWE-620
How to fix
Update
- ba-booking ba_book_everything1.6.21 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ba-booking ba_book_everything | v < 1.6.21 | 1.6.21 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.