CVE-2025-4607 - PSW Front-end Login & Registration <= 1.12 - Insufficiently Random Values to Unauthenticated Account Takeover/Privilege Escalation via customer_registration Function

Back Back to CVE browser

CRITICAL

PSW Front-end Login & Registration <= 1.12 - Insufficiently Random Values to Unauthenticated Account Takeover/Privilege Escalation via customer_registration Function

Published May 31, 2025

9.8

CRITICAL

CVSS 3.1

EPSS 0.57%

Description

The PSW Front-end Login & Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.12 via the customer_registration() function. This is due to the use of a weak, low-entropy OTP mechanism in the forget() function. This makes it possible for unauthenticated attackers to initiate a password reset for any user, including administrators, and elevate their privileges for full site takeover.

Affected products

Vendor Empoweringprowebsite Product PSW Front-end Login & Registration Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=1.12

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Empoweringprowebsite

PSW Front-end Login & Registration

unaffected

Version	Status	Constraints
0	affected	<=1.12

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-330

Insufficient Randomness

References (6)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-16545		Advisory
https://plugins.trac.wordpress.org/browser/psw-login-and-registration/trunk/public/class-prositegeneralfeatures-public.php#L323
https://plugins.trac.wordpress.org/browser/psw-login-and-registration/trunk/public/class-prositegeneralfeatures-public.php#L493
https://plugins.trac.wordpress.org/browser/psw-login-and-registration/trunk/public/class-prositegeneralfeatures-public.php#L731
https://wordpress.org/plugins/psw-login-and-registration/#developers
https://www.wordfence.com/threat-intel/vulnerabilities/id/a2d6e595-0682-4a41-a432-afbcb50144e8?source=cve