CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
The UiPress lite plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.08. This is due to missing capability checks in the 'uip_process_block_query' AJAX function. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract sensitive user data including password hashes, emails, and other user information that could be used for account takeover attacks.
Explanation of Vulnerability in Simple Terms
UiPress Lite versions up to 3.5.08 lack proper authorization checks, allowing authenticated users with low privileges to read sensitive data they should not access. An attacker with a basic user account can retrieve confidential information from the site without modifying or disrupting it. Update to a version newer than 3.5.08 to resolve this issue.
What an attacker can do
Read sensitive data accessible only to higher-privileged users.
Potential impact on your site
Confidential information may be exposed to users who should not have access to it.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
