CVE-2023-1888

The Directorist plugin for WordPress is vulnerable to an arbitrary user password reset in versions up to, and including, 7.5.4. This is due to a lack of validation checks within login.php. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to reset the password of an arbitrary user and gain elevated (e.g., administrator) privileges.

• CWE-20
• CWE-20

• https://plugins.trac.wordpress.org/changeset/2920100/directoristIssue Tracking
• https://www.wordfence.com/blog/2023/06/critical-security-update-directorist-wordpress-plugin-patches-two-high-risk-vulnerabilities/
• https://www.wordfence.com/threat-intel/vulnerabilities/id/01943559-e05b-4dca-b322-d880b2729ee7?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/changeset/2920100/directoristIssue Tracking
• https://www.wordfence.com/threat-intel/vulnerabilities/id/01943559-e05b-4dca-b322-d880b2729ee7?source=cveThird Party Advisory

Published

Jun 9, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1882Cross-site Scripting (XSS) - DOM in GitHub repository thorst…5.4
• CVE-2023-1883Improper Access Control in GitHub repository thorsten/phpmyf…5.4
• CVE-2023-1884Cross-site Scripting (XSS) - Generic in GitHub repository th…6.1
• CVE-2023-1885Cross-site Scripting (XSS) - Stored in GitHub repository tho…5.4
• CVE-2023-1886Authentication Bypass by Capture-replay in GitHub repository…9.8
• CVE-2023-1887Business Logic Errors in GitHub repository thorsten/phpmyfaq…4.3
• CVE-2023-1889The Directorist plugin for WordPress is vulnerable to an Ins…6.5
• CVE-2023-1890The Tablesome WordPress plugin before 1.0.9 does not escape …6.1
• CVE-2023-1891The Accordion & FAQ WordPress plugin before 1.9.9 does not e…6.1
• CVE-2023-1892Cross-site Scripting (XSS) - Reflected in GitHub repository …9.6
• CVE-2023-1893The Login Configurator WordPress plugin through 2.1 does not…6.1
• CVE-2023-1894A Regular Expression Denial of Service (ReDoS) issue was dis…5.3