BoomBox Theme Extensions Privilege Escalation Vulnerability via Password Reset in WordPress

A privilege escalation vulnerability allowing account takeover has been identified in the BoomBox Theme Extensions plugin for WordPress, affecting all versions through 1.8.0. The issue arises because the plugin fails to properly verify a user's identity before allowing password changes through the 'boombox_ajax_reset_password' function. This flaw enables authenticated attackers with subscriber-level privileges or higher to reset passwords for any user, including administrators, and gain unauthorized access to their accounts.

Impact

Exploitation of this vulnerability allows for unauthorized password changes, enabling attackers to gain access to other users' accounts, including those of administrators.

Remediation

Users are advised to update the BoomBox Theme Extensions plugin to version 1.8.1 or a newer patched version.