A critical authentication bypass vulnerability in the teddy-bear-customize-addon plugin enables unauthenticated attackers to hijack any user account, including those with administrative privileges.

This vulnerability is an improper authentication flaw (CWE-287) where the plugin fails to verify user passwords during the authentication process. An unauthenticated attacker can exploit this by providing a target user email address to gain full account access.

The ability for an unauthenticated attacker to gain administrative access to a WordPress site poses a catastrophic risk to business operations. Successful exploitation allows for complete site compromise, including the exfiltration of sensitive data, the injection of malicious content, and full control over the underlying server infrastructure. Given the CVSS score of 9.8, this vulnerability must be treated as a critical threat to organizational integrity and security.

Immediate Action: Since no official patch is currently available, immediately deactivate and remove the teddy-bear-customize-addon plugin from your WordPress environment until a secure update is released by the vendor.

Proactive Monitoring: Review web server and WordPress authentication logs for suspicious login patterns, particularly logins occurring without associated password verification steps or irregular administrative activity.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block unauthorized authentication attempts, although these should be considered temporary measures until the vulnerable plugin is removed.

Public Exploit Available: Unknown.

This vulnerability represents a significant security failure that effectively removes all barriers to unauthorized access. Organizations currently utilizing this plugin must prioritize its immediate removal to prevent potential exploitation. Conduct a thorough audit of all user accounts to identify any unauthorized modifications that may have occurred prior to the removal of the plugin.