YITH Easy Login & Register Popup for WooCommerce <= 1.8.0 - Authentication Bypass via Password Reset
criticalThe YITH Easy Login & Register Popup for WooCommerce plugin for WordPress is vulnerable to authorization bypass via password reset in versions up to, and including, 1.8.0. This is due to the plugin failing to properly validate if a user is authorized to perform a password reset for the supplied user_login via the yith_...
- CVSS:
- 9.8
- Affected:
- up to 1.8.0
- Fixed in:
- 1.8.1
- Disclosed:
- Sep 20, 2021