https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 16:46:11 +0000 https://cve.radiocsirt.org/vuln/cve-2024-8794 <p><strong>Affected:</strong> bookingalgorithms BA Book Everything, booking_algorithms ba_book_everything</p> <p>The BA Book Everything plugin for WordPress is vulnerable to arbitrary password reset in all versions up to, and including, 1.6.20. This is due to the reset_user_password() function not verifying a user&#39;s identity prior to setting a password. This makes it possible for unauthenticated attackers to reset any user&#39;s passwords, including administrators. It&#39;s important to note that the attacker will not have access to the generated password, therefore, privilege escalation is not possible.</p> <p><strong>Affected:</strong> bookingalgorithms BA Book Everything, booking_algorithms ba_book_everything</p> <p>The BA Book Everything plugin for WordPress is vulnerable to arbitrary password reset in all versions up to, and including, 1.6.20. This is due to the reset_user_password() function not verifying a user&#39;s identity prior to setting a password. This makes it possible for unauthenticated attackers to reset any user&#39;s passwords, including administrators. It&#39;s important to note that the attacker will not have access to the generated password, therefore, privilege escalation is not possible.</p> https://cve.radiocsirt.org/vuln/cve-2024-8794