CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects WordPress.
CVE
CVE-2021-24527
Severity
CRITICAL
CVSS
9.8
EPSS
7.70%
WordPress
Original NVD Description
The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.9 has a bug allowing any user to reset the password of the admin of the blog, and gain unauthorised access, due to a bypass in the way the reset key is checked. Furthermore, the admin will not be notified of such change by email for example.
Related CVEs
Other vulnerabilities affecting the same vendor(s)