CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of user names due to a missing capability check on the wpext_change_admin_name() function in all versions up to, and including, 3.0.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change an admin's username to a username of their liking as long as the default 'admin' was used.
Explanation of Vulnerability in Simple Terms
The Ultimate WordPress Toolkit plugin for WordPress contains a missing authorization check that allows authenticated users with low privileges to modify site data. An attacker with a basic user account can change or delete content without proper permission validation. This affects all versions up to 3.0.8. Site administrators should update to a version newer than 3.0.8 immediately.
What an attacker can do
Modify or delete site content and settings without proper authorization.
Potential impact on your site
Unauthorized users can alter or remove critical site data, potentially disrupting site functionality or content integrity.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., subscriber or contributor).
Key dates
External resources
Related vulnerabilities
