RestroPress WordPress Plugin Authentication Bypass Vulnerability via Forged JWT Tokens

A vulnerability allowing authentication bypass has been identified in the RestroPress – Online Food Ordering System plugin for WordPress, affecting versions 3.0.0 to 3.1.9.2. The issue arises because the plugin exposes user private tokens and API data through the /wp-json/wp/v2/users REST API endpoint. This exposure enables unauthenticated attackers to forge JSON Web Tokens (JWT) for other users, including administrators, and authenticate as them.

Impact

Exploitation of this vulnerability allows unauthenticated users to bypass authentication mechanisms and gain unauthorized access to user accounts, potentially including administrative privileges.

Remediation

No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.