CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
The WP Login and Register using JWT plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'mo_jwt_generate_new_api_key' function in all versions up to, and including, 3.0.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to generate a new API key on site's that do not have an API key configured and subsequently use that to access restricted endpoints.
Explanation of Vulnerability in Simple Terms
WP Login and Register using JWT versions 3.0.0 and earlier contain an authorization bypass that allows authenticated users to access functionality they should not have permission to use. An attacker with a low-privilege account can read sensitive data by exploiting missing access controls. The vulnerability requires valid login credentials but no additional user interaction.
What an attacker can do
Read sensitive data by bypassing authorization checks with a low-privilege account.
Potential impact on your site
Low-privilege users can access data or features restricted to higher roles, potentially exposing private information.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the WordPress site.
Key dates
External resources
