CVE-2021-24998

Simple JWT Login < 3.3.0 - Insecure Password Creation

The Simple JWT Login WordPress plugin before 3.3.0 can be used to create new WordPress user accounts with a randomly generated password. The password is generated using the str_shuffle PHP function that "does not generate cryptographically secure values, and should not be used for cryptographic purposes" according to PHP's documentation.

Affected

Simple JWT Login

CVSS v3.1 NVD

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

1.19% chance of exploitation in the next 30 days, 67th percentile

Published

2021-12-27

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/1cca404e-766a-43ab-b41f-77d6a3b282fb

Security advisories

• https://plugins.trac.wordpress.org/changeset/2613782

References

• CVE Record
• NVD entry