BuddyForms WordPress plugin unauthenticated privilege escalation
Anyone can create an administrator account on a WordPress signup form plugin!
Summary
A flaw in the BuddyForms WordPress plugin lets logged-out attackers create an administrator account and take over the site. All versions up to and including 2.10.5 are affected.
Affected when
- "Anyone can register" enabled
- at least one public BuddyForms form attached to a page
What to do
Check that you run a version newer than 2.10.5 and read the vendor's advisory. The sources name no fixed version.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen