Authentication vulnerability in UserPro – Community and User Profile WordPress Plugin 5.1.1

The UserPro plugin for WordPress is not secure in versions up to and including 5.1.1. This is because it does not have enough checks in place when resetting passwords. The function used for resetting passwords uses the plaintext value of a key, which makes it easy for someone to get hold of the key and use it to reset the password without authorization. An attacker could use other vulnerabilities, such as those listed as CVE-2023-2448 and CVE-2023-2446, or another vulnerability like SQL Injection in another plugin or theme installed on the site, to exploit this vulnerability.