The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.29. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.
The plugin does not properly verify user identity before performing password change operations. An unauthenticated attacker can send a specially crafted request that causes the password of a selected account to be overwritten — including an account with administrator privileges. After changing the password, the attacker logs into the compromised account, gaining full access to the WordPress panel.
An attacker can completely take over any WordPress user account, including administrator accounts, giving them full control over the website — ability to modify content, install malware, and access data.
The Branda plugin should be updated to a version higher than 3.4.29. The patch is available in the WordPress repository under changeset 3568291. Until the update is applied, it is recommended to deactivate the plugin.
The Branda plugin (branda-white-labeling) for WordPress in all versions up to and including 3.4.29.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H