IMITHEMES Listing Plugin Privilege Escalation Vulnerability via Unverified Password Reset

A privilege escalation vulnerability allowing account takeover has been identified in the IMITHEMES Listing WordPress plugin, affecting all versions through 3.3. The issue arises because the plugin fails to properly validate a verification code before allowing password changes through the imic_reset_password_init() function. This flaw enables unauthenticated attackers to reset passwords for any user, including administrators, if the user's email address is known.

Impact

Exploitation of this vulnerability allows for unauthorized password changes, potentially leading to account takeover, including administrative accounts.

Remediation

Users are advised to update the IMITHEMES Listing plugin to version 3.4 or a newer patched version.