The Lenxel WP WordPress theme versions up to 1.0.31 contain an improper authentication vulnerability (CWE-287) in the password-reset action. The theme fails to verify user authorization or ownership when processing password reset requests, relying solely on a CSRF nonce for validation. This weakness enables unauthenticated attackers to reset passwords of arbitrary users, including administrators, thereby gaining unauthorized access and control over affected accounts. The vulnerability is also related to CWE-352 (Cross-Site Request Forgery), as the nonce validation alone is insufficient to prevent exploitation.

Successful exploitation allows unauthenticated attackers to reset the password of any user, including administrators, resulting in complete account takeover. This compromises confidentiality, integrity, and availability of the affected WordPress site by granting attackers full control over user accounts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the password-reset functionality and monitor for suspicious activity. Consider disabling the vulnerable theme or replacing it with a secure alternative.