PT-2023-24651 · WordPress · Profilegrid

István Márton + 1 · Published 2023-08-31 · Updated 2023-09-01 · CVE-2023-3404

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ProfileGrid plugin for WordPress versions up to, and including, 5.5.0

Description The issue allows unauthorized decryption of private information. This is due to the passphrase and iv being hardcoded in the pm encrypt decrypt pass function, making it possible for authenticated attackers with administrator-level permissions or above to decrypt and view users' passwords. If combined with another issue, this can potentially grant lower-privileged users access to users' passwords.

Recommendations For ProfileGrid plugin for WordPress versions up to, and including, 5.5.0: Update to a version higher than 5.5.0 to resolve the issue. As a temporary workaround, consider restricting access to the pm encrypt decrypt pass function until a patch is available.

Fix

Weakness Enumeration

CWE-321

Related Identifiers

CVE-2023-3404

Affected Products

Profilegrid

References · 5

• https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/tags/5.4.8/includes/class-profile-magic-request.php#L325 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-3404 · Security Note
• https://osv.dev/vulnerability/CVE-2023-3404 · Vendor Advisory
• https://plugins.trac.wordpress.org/changeset/2936383/profilegrid-user-profiles-groups-and-communities#file475 · Patch
• https://wordfence.com/threat-intel/vulnerabilities/id/6d490bfb-6560-428e-ad91-0f8d8bc9b1f2?source=cve · Note