CVE-2021-24359: posimyth the_plus_addons_for_elementor Improper Access Control

Vulnerability summary

CVE-2021-24359 is a medium (CVSS 5.3) Improper Access Control vulnerability in posimyth the_plus_addons_for_elementor. EPSS estimates a 1.11% chance of exploitation in the next 30 days, higher than 65.6% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 14-06-2021
   PublishedVulnerability first disclosed.
2. 03-08-2024
   Last modifiedVulnerability information updated.

Description

The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.11 did not properly check that a user requesting a password reset was the legitimate user, allowing an attacker to send an arbitrary reset password email to a registered user on behalf of the WordPress site. Such issue could be chained with an open redirect (CVE-2021-24358) in version below 4.1.10, to include a crafted password reset link in the email, which would lead to an account takeover.

• CWE-284Improper Access ControlThe product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
• CWE-287Improper AuthenticationWhen an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
• CWE-601URL Redirection to Untrusted Site ('Open Redirect')The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.