Descripción
The Doccure theme for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 1.4.8. This due the plugin providing user-controlled access objects, letting a user bypass authorization system resources. makes it possible unauthenticated attackers change passwords potentially take over administrator accounts.
https://themeforest.net/item/doccure-medical-wordpress-theme/34329202
https://www.wordfence.com/threat-intel/vulnerabilities/id/8f8b1d8f-b2b6-415c-91f2-e5b98048258d?source=cve
