Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin Registration Forms-User Registration Forms Invitation-Based Registrations Front-end User Profile Login Form Content Restriction Security Bypass - CVE-2014-8802 - Vulnerability Database
WP Plugin Pie Register

WordPress Plugin Registration Forms-User Registration Forms Invitation-Based Registrations Front-end User Profile Login Form Content Restriction Security Bypass - CVE-2014-8802

Medium
Reference: CVE-2014-8802
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-8802
Title: WordPress Plugin Registration Forms-User Registration Forms Invitation-Based Registrations Front-end User Profile Login Form Content Restriction Security Bypass
Overview:

WordPress Plugin Registration Forms-User Registration Forms Invitation-Based Registrations Front-end User Profile Login Form Content Restriction is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently reset passwords of random users if account ids are known. WordPress Plugin Registration Forms-User Registration Forms Invitation-Based Registrations Front-end User Profile Login Form Content Restriction version 2.0.13 is vulnerable prior versions may also be affected.