Unauthenticated Email Verification Bypass in User Verification by PickPlugins

Executive Summary

This vulnerability is an Insecure Direct Object Reference (IDOR) flaw in the User Verification WordPress plugin versions 2.0.47 or earlier. It allows unauthenticated attackers to lock out any user, including administrators, by resetting their email-verification status. The issue occurs because the plugin does not verify if a request to resend a verification email is authorized for the specified user or bind the protecting token to that user.

Useful 0 Not Useful 0

Detection Guidance

Check if the User Verification by PickPlugins plugin version 2.0.47 or earlier is installed on your WordPress site. Look for unauthorized resend verification email requests in server logs or WordPress activity logs.

Useful 0 Not Useful 0

Impact Analysis

If you use the affected WordPress plugin, an attacker could exploit this flaw to lock you or other users out of your accounts by resetting email-verification statuses. This could prevent legitimate access to your WordPress site, including administrative functions, leading to potential loss of control over your website.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could impact compliance with GDPR and HIPAA by allowing unauthorized access to user accounts, potentially leading to data breaches or unauthorized modifications. GDPR requires protecting user data and ensuring access controls, while HIPAA mandates safeguarding protected health information. Exploitation of this flaw could violate these requirements.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update the User Verification plugin to the latest version if available. If no update exists, consider disabling the plugin temporarily until a patch is released. Review user accounts for unauthorized changes and revoke any suspicious sessions.

Useful 0 Not Useful 0