PT-2023-16543 · WordPress · The Profile Builder – User Profile & User Registration Forms
István Márton
+1
·
Published
2023-02-14
·
Updated
2023-04-27
·
CVE-2023-0814
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
The Profile Builder – User Profile & User Registration Forms plugin for WordPress versions up to, and including 3.9.0
Description
The issue is related to sensitive information disclosure via the
user meta shortcode. This is due to insufficient restriction on sensitive user meta values that can be called via that shortcode. Authenticated attackers with subscriber-level permissions and above can retrieve sensitive user meta, potentially gaining access to a high-privileged user account. The Usermeta shortcode must be enabled for this issue to be exploited.Recommendations
For versions up to, and including 3.9.0, consider disabling the
user meta shortcode until a patch is available to prevent exploitation. Restrict access to sensitive user meta values to minimize the risk of unauthorized access.Fix
Information Disclosure
Incorrect Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
The Profile Builder – User Profile & User Registration Forms