A critical vulnerability in the Single Sign On For TNG plugin allows unauthenticated attackers to hijack administrative accounts and achieve full site takeover.

The plugin fails to correctly validate password reset requests, which permits an unauthenticated attacker to manipulate the reset process. This flaw, classified under CWE-287, enables unauthorized access to any user account on the WordPress installation.

The ability for an unauthenticated attacker to reset administrative passwords presents an existential risk to the business. A successful exploit leads to complete compromise of the WordPress site, enabling the attacker to exfiltrate sensitive data, inject malicious code, or disrupt business operations. Given the CVSS score of 9.8, this vulnerability is considered critical and requires immediate remediation.

Immediate Action: Update the Single Sign On For TNG plugin to version 2.2.0 or later immediately to address the validation flaw.

Proactive Monitoring: Review web server access logs for suspicious requests directed at password reset endpoints or unusual account activity originating from unknown IP addresses.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block unauthorized requests to password recovery functions until the update is applied.

Public Exploit Available: Unknown

Organizations using the Single Sign On For TNG plugin must prioritize this update as a top-tier security task. Given the potential for full site takeover and the ease of exploitation, failure to patch immediately leaves the infrastructure exposed to total compromise. Verify that all administrative accounts have not been modified by unauthorized parties after applying the update.