2 lines
3.0 KiB
JSON
2 lines
3.0 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"PSW Front-end Login & Registration","vendor":"empoweringprowebsite","versions":[{"lessThanOrEqual":"1.12","status":"affected","version":"0","versionType":"semver"}]}],"source":"security@wordfence.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The PSW Front-end Login & Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.12 via the customer_registration() function. This is due to the use of a weak, low-entropy OTP mechanism in the forget() function. This makes it possible for unauthenticated attackers to initiate a password reset for any user, including administrators, and elevate their privileges for full site takeover."},{"lang":"es","value":"El complemento PSW Front-end Login & Registration para WordPress es vulnerable a la escalada de privilegios en todas las versiones hasta la 1.12 incluida, a través de la función customer_registration(). Esto se debe al uso de un mecanismo OTP débil y de baja entropía en la función forget(). Esto permite a atacantes no autenticados iniciar el restablecimiento de contraseña de cualquier usuario, incluidos los administradores, y elevar sus privilegios para obtener el control total del sitio."}],"id":"CVE-2025-4607","lastModified":"2026-06-17T09:33:37.017","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"security@wordfence.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-4607","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-06-02T15:37:18.671660Z","version":"2.0.3"}}]},"published":"2025-05-31T07:15:21.070","references":[{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/psw-login-and-registration/trunk/public/class-prositegeneralfeatures-public.php#L323"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/psw-login-and-registration/trunk/public/class-prositegeneralfeatures-public.php#L493"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/psw-login-and-registration/trunk/public/class-prositegeneralfeatures-public.php#L731"},{"source":"security@wordfence.com","url":"https://wordpress.org/plugins/psw-login-and-registration/#developers"},{"source":"security@wordfence.com","url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a2d6e595-0682-4a41-a432-afbcb50144e8?source=cve"}],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-330"}],"source":"security@wordfence.com","type":"Secondary"}]}
|