CVE-2020-11027 MEDIUM

CVE-2020-11027: Password reset links invalidation issue in WordPress

Vendor Wordpress
Product WordPress
Weakness CWE-672
Published April 30, 2020
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

6.1/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction Required
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N

What the vulnerability does

01Description

In affected versions of WordPress, a password reset link emailed to a user does not expire upon changing the user password. Access would be needed to the email account of the user by a malicious party for successful execution. This has been patched in version 5.4.1, along with all the previously affected versions via a minor release (5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4.6.18, 4.5.21, 4.4.22, 4.3.23, 4.2.27, 4.1.30, 4.0.30, 3.9.31, 3.8.33, 3.7.33).

Explanation of Vulnerability in Simple Terms

02Summary

WordPress 5.4.0 contains a flaw that allows an attacker to read sensitive information from the site when a user visits a malicious link. The vulnerability requires user interaction and high attack complexity, but can expose data across the WordPress installation. This affects WordPress core and requires updating to patch the issue.

What an attacker can do

03Attacker Capabilities

Read sensitive information from the WordPress site by tricking a user into visiting a malicious link.

Potential impact on your site

04Site Impact

Sensitive data could be exposed to attackers if users click malicious links while logged into your WordPress site.

Conditions required to exploit

05Prerequisites

A site visitor must click a link or visit a page controlled by the attacker; no authentication required.

Key dates

06Disclosure timeline

April 30, 2020 CVE published
August 4, 2024 Record updated