CVE-2024-8794

The BA Book Everything plugin for WordPress is vulnerable to arbitrary password reset in all versions up to, and including, 1.6.20. This is due to the reset_user_password() function not verifying a user's identity prior to setting a password. This makes it possible for unauthenticated attackers to reset any user's passwords, including administrators. It's important to note that the attacker will not have access to the generated password, therefore, privilege escalation is not possible.

• CWE-620

• https://plugins.trac.wordpress.org/browser/ba-book-everything/tags/1.6.20/includes/class-babe-my-account.php#L610Product
• https://plugins.trac.wordpress.org/browser/ba-book-everything/tags/1.6.20/includes/class-babe-users.php#L266Product
• https://plugins.trac.wordpress.org/changeset/3152728/ba-book-everything/trunk/includes/class-babe-users.phpPatch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/4e261b0e-5ca3-4f5c-acc0-41abee31b148?source=cveThird Party Advisory

Published

Sep 24, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-8788The EU/UK VAT Manager for WooCommerce plugin for WordPress i…6.1
• CVE-2024-8789Lunary-ai/lunary version git 105a3f6 is vulnerable to a Regu…7.5
• CVE-2024-8790The Social Share With Floating Bar plugin for WordPress is v…6.1
• CVE-2024-8791The Donation Forms by Charitable – Donations Plugin & Fundra…9.8
• CVE-2024-8792The Subscribe to Comments plugin for WordPress is vulnerable…6.1
• CVE-2024-8793The Store Exporter for WooCommerce – Export Products, Export…6.1
• CVE-2024-8795The BA Book Everything plugin for WordPress is vulnerable to…8.8
• CVE-2024-8796Under the default configuration, Devise-Two-Factor versions …5.3
• CVE-2024-8797The WP Booking System – Booking Calendar plugin for WordPres…6.1
• CVE-2024-8798No proper validation of the length of user input in olcp_ind…6.5
• CVE-2024-8799The Custom Banners plugin for WordPress is vulnerable to Ref…6.1
• CVE-2024-8800The RabbitLoader – Website Speed Optimization for improving …6.1