Login & Register Forms – Popup, Slider, Profile & WooCommerce

Login & Register Forms – Popup, Slider, Profile & WooCommerce is affected by broken access control. The vulnerable path is reachable without authentication. A successful request can reach data or an operation that should be restricted to another user or a more privileged role. The published affected range is 3.0.0 to < 4.0.2.

Login & Register Forms before 4.0.2 keys both password-reset verification codes and per-source attempt counters on client-controlled data rather than a server-derived identity. When verification-code reset mode is enabled, an unauthenticated attacker can repeatedly change that data to reset the attempt limit, brute-force a target's code and take over any account, including an Administrator account.

Login & Register Forms 3.2.5 through 4.0.1 keys password-reset verification state to a client-supplied address header rather than binding it to the account and party that completed verification. The state is not consumed after a password change and remains reusable for a day. When verification-code reset mode is enabled and a victim has recently verified a reset, an unauthenticated attacker can reuse that state to change the victim's password repeatedly and take over the account, including an Administrator account.

Login/Signup Popup is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

Login/Signup Popup ( Inline Form + Woocommerce ) is affected by a security weakness. Exploitation requires an authenticated subscriber account. The resulting impact depends on how the affected component exposes the vulnerable operation.

Easy Login Woocommerce is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.