CyberRota Analysis
AI-GeneratedThe Advanced Custom Fields: Extended WordPress plugin prior to version 0.9.2.7 is vulnerable due to inadequate authorization checks in its front-end Forms module, allowing unauthenticated users to overwrite the passwords of existing administrator accounts. This vulnerability poses a significant risk as it enables attackers to gain unauthorized access to administrator accounts, potentially compromising the entire site. WordPress site administrators using this plugin should prioritize immediate updates to mitigate the risk of account takeover.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.7 does not verify that the requester is authorized to edit the targeted user account in the update-user action of its front-end Forms module; it only checks a capability when the submitted role is administrator or super_admin. On a site that exposes a publicly reachable front-end form whose user-update action targets an existing administrator (a fixed target, or one mapped to a visitor-submitted field) and maps the password to a visitor-submitted field, an unauthenticated visitor can overwrite that administrator's password and take over the account. The default target is the submitting user, so exploitation depends on the form being configured to target another account.