Adifier System < 3.1.8 - Unauthenticated Arbitrary Password Reset

Description

The plugin is vulnerable to privilege escalation via account takeover due to the plugin not properly validating a user's identity prior to updating their details like password through the adifier_recover() function. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.