{"id":"CVE-2026-115237","published":"2026-11-09T07:17:28.087","lastModified":"2026-11-10T16:28:46.510","description":"The Grand Job WordPress plugin through 1.2.1 does not correctly verify the password reset code before updating a user's password, allowing unauthenticated attackers to set the password of arbitrary accounts, including administrators, and fully take over the site.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-287"],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/b5c809dd-9b65-4a59-b939-e5bc68912f29/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The Grand Job WordPress plugin (<=1.2.1) fails to properly validate password reset codes, enabling unauthenticated users to bypass authentication and reset passwords for any user account, including administrators. This allows full site compromise without requiring credentials or user interaction.","exploitability":"Trivial to exploit; requires only sending a specially crafted HTTP request to the plugin's password reset endpoint with a known username and arbitrary new password.","blast_radius":"Complete site takeover is possible, granting attackers full administrative control over WordPress, including data exfiltration, malware deployment, and persistence establishment.","remediation":"Upgrade to Grand Job plugin version 1.2.2 or later, which includes proper validation of password reset codes.","detection":"Look for repeated POST requests to /wp-admin/admin-ajax.php?action=grand_job_reset_password (or similar plugin endpoint) with valid usernames but non-matching or missing reset tokens; anomalous password change events in WordPress user logs without corresponding email notifications may also indicate exploitation.","tags":["auth-bypass","wordpress","plugin","password-reset","unauthenticated"],"model":"garnet-coder","analyzedAt":"2026-11-10T09:43:32.647Z"}}