CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to unauthorized access of data via its publicly exposed reset-password endpoint. The plugin looks up the 'valid_email' value based solely on a supplied username parameter, without verifying that the requester is associated with that user account. This allows unauthenticated attackers to enumerate email addresses for any user, including administrators.
Explanation of Vulnerability in Simple Terms
PeproDev Ultimate Profile Solutions versions 1.9.1 through 7.5.2 contain an improper access control vulnerability that allows unauthenticated attackers to read sensitive information over the network. The flaw stems from insufficient authorization checks on data access endpoints. No user interaction is required to exploit this issue. Site administrators should update to a version newer than 7.5.2.
What an attacker can do
Read sensitive data from the application without authentication.
Potential impact on your site
Confidential user data may be exposed to unauthorized parties without warning.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
