CyberRota Analysis
AI-GeneratedThe Eventer plugin for WordPress is critically vulnerable due to its insecure password reset mechanism, which stores plaintext reset keys in the user meta field, allowing unauthenticated attackers to exploit this weakness and potentially take over user accounts, including those of administrators. This vulnerability is particularly concerning for sites running affected versions of the plugin, especially when combined with other vulnerabilities such as SQL Injection. WordPress site administrators using the Eventer plugin should prioritize immediate updates to mitigate the risk of account compromise.
Original NVD Description
The Eventer plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 4.4.2. The plugin stores a plaintext copy of the password reset key in the `eventer_verification_code` user meta field when a user requests a password reset. The plaintext key stored in `wp_usermeta` can be used with the plugin's custom reset action to set a new password for any user. Combined with another vulnerability such as SQL Injection (CVE-2026-9700), this makes it possible for unauthenticated attackers to extract the plaintext reset key and take over any user account, including administrators. Note: The password reset function only works up to PHP version 7.4.