Authentication vulnerability in Adifier System 3.1.7

The Adifier System plugin for WordPress has a security issue that allows unauthorized users to gain access to user accounts. This can happen because the plugin does not properly confirm a user’s identity before allowing them to change their password through the adifier_recover() function. This means that attackers who are not logged in can change the passwords of any user, even administrators, and use this to get into their account.