A critical authorization flaw in the ChamaWP WordPress plugin enables unauthenticated attackers to perform unauthorized password resets, leading to potential full site takeover.

The plugin suffers from a missing authorization vulnerability (CWE-862) within its password reset functionality. This allows an unauthenticated attacker to trigger password resets for arbitrary accounts, including those with administrative privileges.

The CVSS score of 9.8 reflects the high risk of this vulnerability. Successful exploitation permits an attacker to gain full control over the WordPress site by resetting administrative credentials, leading to data exfiltration, malicious content injection, and complete loss of site availability.

Immediate Action: Update the ChamaWP plugin to version 1.0.13 or higher immediately to resolve the authorization logic flaw.

Proactive Monitoring: Monitor user account activity and password reset logs for suspicious requests occurring for multiple user accounts in a short duration.

Compensating Controls: Implement a Web Application Firewall (WAF) to block suspicious requests targeting the password reset functionality if immediate patching is not feasible.

Public Exploit Available: Unknown

Administrators must prioritize the update of the ChamaWP plugin. Given the ease of exploitation, failure to patch this vulnerability leaves the entire WordPress installation vulnerable to a complete site takeover by an unauthenticated attacker.