The UserPro plugin for WordPress is vulnerable to sensitive information disclosure via the 'userpro' shortcode in versions up to, and including 5.1.1. This is due to insufficient restriction on sensitive user meta values that can be called via that shortcode. This makes it possible for authenticated attackers, with subscriber-level permissions, and above to retrieve sensitive user meta that can be used to gain access to a high privileged user account.
References
| Link | Resource |
|---|---|
| https://www.wordfence.com/threat-intel/vulnerabilities/id/4072ba5f-6385-4fa3-85b6-89dac7b60a92?source=cve | Third Party Advisory |
| https://codecanyon.net/item/userpro-user-profiles-with-social-login/5958681 | Product |
| http://packetstormsecurity.com/files/175871/WordPress-UserPro-5.1.x-Password-Reset-Authentication-Bypass-Escalation.html | Third Party Advisory VDB Entry |
Configurations
History
30 Nov 2023, 05:27
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| First Time |
Userproplugin
Userproplugin userpro |
|
| References | () https://codecanyon.net/item/userpro-user-profiles-with-social-login/5958681 - Product | |
| References | () http://packetstormsecurity.com/files/175871/WordPress-UserPro-5.1.x-Password-Reset-Authentication-Bypass-Escalation.html - Third Party Advisory, VDB Entry | |
| References | () https://www.wordfence.com/threat-intel/vulnerabilities/id/4072ba5f-6385-4fa3-85b6-89dac7b60a92?source=cve - Third Party Advisory | |
| CPE | cpe:2.3:a:userproplugin:userpro:*:*:*:*:*:wordpress:*:* |
22 Nov 2023, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
22 Nov 2023, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-11-22 08:15
Updated : 2023-11-30 05:27
NVD link : CVE-2023-2446
Mitre link : CVE-2023-2446
JSON object : View
Products Affected
userproplugin
- userpro
CWE