CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The WP Email Debug plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the WPMDBUG_handle_settings() function in versions 1.0 to 1.1.0. This makes it possible for unauthenticated attackers to enable debugging and send all emails to an attacker controlled address and then trigger a password reset for an administrator to gain access to an administrator account.
Explanation of Vulnerability in Simple Terms
WP Email Debug versions 1.0 through 1.1.0 lack authorization checks, allowing unauthenticated attackers to access sensitive functionality over the network. An attacker can read, modify, or delete data without needing valid credentials or user interaction. This affects all sites running the vulnerable plugin.
What an attacker can do
Read, modify, or delete site data without logging in.
Potential impact on your site
Attackers can compromise your site's data and functionality without any credentials.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
