CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The JAY Login & Register plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.01. This is due to incorrect authentication checking in the 'jay_login_register_process_switch_back' function with the 'jay_login_register_process_switch_back' cookie value. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the user id.
Explanation of Vulnerability in Simple Terms
JAY Login & Register versions 2.4.01 and earlier contain an improper file permissions vulnerability that allows unauthenticated attackers to read, modify, or delete sensitive files on the site without any user interaction. The vulnerability affects all versions from release, and no patch information is currently available. Site administrators should immediately review access controls and consider disabling the plugin until an update is released.
What an attacker can do
Read, modify, or delete files on the site without logging in or user interaction.
Potential impact on your site
Attackers can access sensitive data, alter site content, or disable the site entirely.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
