The BoomBox Theme Extensions WordPress plugin contains a weakness classified as CWE-640, involving an insecure password recovery mechanism. Specifically, the plugin does not adequately verify the identity of users requesting password resets, allowing authenticated attackers with low-level privileges to reset passwords of other users, including administrators. This vulnerability can be exploited to escalate privileges and gain unauthorized access to higher-privileged accounts. The CVSS 3.1 score is 8.8 (high), reflecting network attack vector, low attack complexity, required privileges at the subscriber level, no user interaction, and high impact on confidentiality, integrity, and availability.

An attacker with subscriber-level access can reset passwords of any user, including administrators, resulting in full account takeover and privilege escalation. This compromises the confidentiality, integrity, and availability of the affected WordPress site and its data. There are no known exploits in the wild at the time of publication.

No official patch or fix is currently available for this vulnerability. Users should monitor the vendor's advisory for updates and apply patches once released. Until then, restrict subscriber-level access to trusted users only and consider disabling or removing the BoomBox Theme Extensions plugin if possible to prevent exploitation.