Optional Email WordPress Plugin Privilege Escalation Vulnerability Allowing Account Takeover

A vulnerability exists in the Optional Email plugin for WordPress, affecting all versions through 1.3.11. The issue arises from the plugin's 'random_password' filter, which is not limited to registration contexts. This oversight allows unauthenticated attackers to manipulate password reset key generation. By setting a known password reset key, attackers can reset the passwords of any user, including administrators, and gain access to their accounts.

Impact

Exploitation of this vulnerability allows for unauthorized password resets, enabling attackers to take over user accounts, including those of administrators.