Horizon Alert
Summary of the vulnerability and why it matters
A critical security flaw has been identified in the FoodBoxBooker WordPress plugin that could allow unauthorized individuals to reset user passwords, including those of administrators, potentially leading to complete control of the website. This vulnerability, present in versions prior to 1.0.7, requires no authentication to exploit and could have significant implications for site integrity and data security.
- Attackers can reset any user's password.
- It allows full website control.
- Confirm if your site uses this plugin.
Attack Path
How an attacker could exploit the issue
An attacker could exploit this vulnerability by sending a crafted request to the website's password reset functionality. This feature is often publicly accessible, meaning the attacker doesn't need any prior access or authentication to initiate the process. By manipulating the password reset request, an attacker can gain control of a user's account, potentially leading to full control of the website.
- Unauthenticated access to the site is required.
- An attacker can trigger the vulnerability via a password reset request.
- Risk of full website takeover and data compromise.
Live Threat
Current exploitation, exposure, and threat context
This vulnerability could allow unauthenticated attackers to reset the passwords of any user on a FoodBoxBooker WordPress site, including administrators. This could result in unauthorized control over the entire website when the plugin is in use.
- Arbitrary user accounts could be compromised.
- Attackers could reset user passwords remotely.
- Complete website takeover is possible.
Operational Fix
Recommended remediation, mitigation, and detection steps
To address this critical vulnerability, application owners and platform teams are likely responsible for identifying all instances of the affected WordPress plugin. The first practical step is to confirm if these instances are internet-facing or accessible and then to engage with the accountable owners to plan remediation, prioritizing business-critical systems.
- Application owners should investigate plugin deployment.
- Verify if the plugin is exposed to the internet.
- Coordinate remediation with site administrators.
