Appy Pie Connect for WooCommerce Privilege Escalation Vulnerability in Password Reset REST Handler

A privilege escalation vulnerability has been identified in the Appy Pie Connect for WooCommerce plugin for WordPress, affecting all versions through 1.1.2. The vulnerability arises from a lack of proper authorization in the reset_user_password() REST handler, allowing unauthenticated attackers to reset the passwords of arbitrary users, including administrators. This could lead to unauthorized administrative access.

Impact

Exploitation of this vulnerability allows for unauthorized password resets, potentially leading to unauthorized administrative access on the WordPress site.