Medium severity · published Mar 11, 2024
CVE-2024-1290
Formidable Registration < 2.12 - Contributor+ Arbitrary User Password Reset To Account Takeover
6.5
CVSS
0.6%
EPSS
No
On KEV
Description
The User Registration WordPress plugin before 2.12 does not prevent users with at least the contributor role from rendering sensitive shortcodes, allowing them to generate, and leak, valid password reset URLs, which they can use to take over any accounts.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 46% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UR
User Registration ·
before 2.12 · source: vendor
UR
User Registration Forms · Strategy11
before 2.12 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-1290
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-1290
Exploit
https://wpscan.com/vulnerability/a60187d4-9491-435a-bc36-8dd348a1ffa3/
More from User Registration
4.8
CVE-2023-5228
User Registration < 3.0.4.2 - Admin+ Stored XSS