Threats tagged 'ghsa-8qfx-8gpq-wc4q'

The UsersWP WordPress plugin versions up to 1.2.78 contain a vulnerability that allows unauthorized account access via predictable passwords. The plugin uses a shared password for 25 built-in dummy user accounts derived from a hash that is also exposed in a hidden form field on the public registration page and AJAX handler, even when registration is disabled. This exposure enables unauthenticated attackers to retrieve the dummy user password and log in as any dummy account, potentially escalating privileges if those accounts have elevated roles. Exploitation requires that an administrator has previously created dummy users via the plugin's Tools page.