WebinarIgnition WordPress Plugin Unauthenticated Login Token Generation Vulnerability

A vulnerability exists in the WebinarIgnition plugin for WordPress, specifically in versions through 4.03.31. The issue arises from a missing capability check in the 'webinarignition_sign_in_support_staff' and 'webinarignition_register_support' functions. This flaw allows unauthenticated attackers to generate login tokens for any WordPress user, potentially bypassing authentication by using the issued authorization cookies.

Impact

Exploitation of this vulnerability allows for authentication bypass, enabling unauthorized access to user accounts on the WordPress site.

Reproduction

The vulnerability can be reproduced by sending a request to the WordPress site with the 'webinarignition_sign_in_support_staff' or 'webinarignition_register_support' actions. These actions can be triggered without any authentication, which will result in the generation of a login token for a specified user.

Remediation

Users are advised to update the WebinarIgnition plugin to version 4.03.33 or later.