CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to Authentication Bypass in versions 1.9.1 to 7.5.2. This is due to handel_ajax_req() function not having proper restrictions on the change_user_meta functionality that makes it possible to set a OTP code and subsequently log in with that OTP code. This makes it possible for unauthenticated attackers to login as other users on the site, including administrators.
Explanation of Vulnerability in Simple Terms
PeproDev Ultimate Profile Solutions versions 1.9.1 through 7.5.2 contain an authentication bypass vulnerability. An attacker can gain unauthorized access to the application without valid credentials, potentially compromising user data and site functionality. The vulnerability requires no user interaction and can be exploited remotely. Immediate patching is strongly recommended.
What an attacker can do
Gain unauthorized access to the application and read or modify sensitive data without valid credentials.
Potential impact on your site
Attackers can access user accounts, read private data, and modify site content without logging in.
Conditions required to exploit
Network access to the affected application; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
