CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The Orion SMS OTP Verification plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.7. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's password to a one-time password if the attacker knows the user's phone number
Explanation of Vulnerability in Simple Terms
Orion SMS OTP Verification versions 1.1.7 and earlier contain an authentication bypass vulnerability. An attacker can exploit weak or missing authentication mechanisms to gain unauthorized access to the system without valid credentials. This affects all confidentiality, integrity, and availability of the application. Immediate patching is required.
What an attacker can do
Bypass authentication and gain full unauthorized access to the system without valid credentials.
Potential impact on your site
Attackers can read, modify, or delete all data; compromise user accounts and SMS OTP tokens; disrupt service availability.
Conditions required to exploit
Network access only; no authentication, user interaction, or special privileges required.
Key dates
External resources
Related vulnerabilities
