CyberRota Analysis
AI-GeneratedThe Frontend Admin plugin for WordPress is vulnerable to an authorization bypass, allowing authenticated attackers with subscriber-level permissions or higher to reset any user's password, including that of administrators. This flaw can lead to full account takeover and total site compromise, making it critical for WordPress site administrators using this plugin to prioritize immediate updates. Users of versions up to and including 3.29.9 should take action to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.29.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level and above permissions, to reset the password of any user on the site, including administrators, leading to full account takeover and complete site compromise. Exploitation requires the attacker to hold a valid encrypted Current-User token obtained by accessing any Edit User form they are legitimately authorized to submit, which they then use as a known-plaintext base for the CBC bit-flipping forgery.