CRITICAL
Build App Online <= 1.0.22 - Account Takeover via Weak Password Reset Mechanism
Published Jun 11, 2024
9.8
CRITICALCVSS 3.1
EPSS 0.62%
Description
The Build App Online plugin for WordPress is vulnerable to account takeover due to a weak password reset mechanism in all versions up to, and including, 1.0.22. This makes it possible for unauthenticated attackers to reset the password of arbitrary users by guessing an 4-digit numeric reset code.
Affected products
-
- Version 0StatusaffectedConstraints<=1.0.22
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Hakeemnala | Build App Online | unaffected |
|
- ≤ 1.0.21
-
- Version 0StatusaffectedConstraints<=1.0.21
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Rahamsolutions | Build App Online | n/a |
|
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (5)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-59656 Advisory
- https://plugins.trac.wordpress.org/browser/build-app-online/tags/1.0.21/public/class-build-app-online-public.php#L3688 Product
- https://plugins.trac.wordpress.org/browser/build-app-online/tags/1.0.21/public/class-build-app-online-public.php#L3757 Product
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3201569%40build-app-online&new=3201569%40build-app-online&sfp_email=&sfph_mail=
- https://www.wordfence.com/threat-intel/vulnerabilities/id/f6047ae6-b1b4-4b31-aa12-560927e1040b?source=cve Third Party Advisory
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Wordfence
Published Jun 11, 2024
Updated Apr 8, 2026
Reserved May 28, 2024
Link CVE-2023-7264
CISA Vulnrichment
Updated Jun 12, 2024
ENISA EUVD
EUVD-2023-59656 Assigner Wordfence
Published Jun 11, 2024
Updated Apr 8, 2026
Exploited since n/a
Link EUVD-2023-59656