CVE-2024-13772: Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Authentication Bypass via Non-Randomized Password for SSO Accounts
Description
The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.1.4. This is due to a lack of randomization of a password created during Single Sign-On via Google or Facebook. This makes it possible for unauthenticated attackers to change the password of arbitrary Candidate-level users if the attacker knows the username assigned to the victim during account creation.
Classification
CVE ID: CVE-2024-13772
CVSS Base Severity: MEDIUM
CVSS Base Score: 5.6
CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected Products
Vendor: uxper
Product: Civi - Job Board & Freelance Marketplace WordPress Theme
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.1% (probability of being exploited)
EPSS Percentile: 24.78% (scored less or equal to compared to others)
EPSS Date: 2025-04-12 (when was this score calculated)
References
https://nvd.nist.gov/vuln/detail/CVE-2024-13772https://www.wordfence.com/threat-intel/vulnerabilities/id/bf04f458-7900-4dd3-84fb-169b74db97ab?source=cve
http://localhost:1337/wp-content/themes/civi/includes/class-ajax.php#L567
http://localhost:1337/wp-content/themes/civi/includes/class-ajax.php#L739