CAFEHAUS API <= 1.0.0 - Unauthenticated Privilege Escalation via Password Reset
Strategic Overview
Vulnerability Overview
The CAFEHAUS API plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.0. This is due to the plugin not properly validating a user's identity prior to updating a password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.
Technical Analysis
REMEDIATION: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement. --- IDENTIFIER: CWE-620 (Unverified Password Change) When setting a new password for a user, the product does not require knowledge of the original password, or using another form of authentication.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C