PT-2023-25800 · WordPress · Profilegrid

István Márton + 1 · Published 2023-07-18 · Updated 2023-07-27 · CVE-2023-3714

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ProfileGrid plugin for WordPress versions up to, and including, 5.5.2

Description The issue is related to a missing capability check on the 'edit group' handler, allowing authenticated attackers with group ownership to update group options, including the associate role parameter, which defines the member's role. This makes it possible for attackers to modify data without proper authorization.

Recommendations For versions up to, and including, 5.5.2, update to version 5.5.3 to fully patch the issue. As a temporary workaround, consider restricting access to the 'edit group' handler for users with group ownership until the update is applied.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2023-3714

Affected Products

Profilegrid

References · 8

• https://plugins.trac.wordpress.org/changeset/2938904/profilegrid-user-profiles-groups-and-communities#file4 · Patch
• https://osv.dev/vulnerability/CVE-2023-3714 · Vendor Advisory
• https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/tags/5.4.8/public/partials/profile-magic-group.php#L80 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-3714 · Security Note
• https://plugins.trac.wordpress.org/changeset/2939344/profilegrid-user-profiles-groups-and-communities/trunk/public/partials/profile-magic-group.php · Patch
• https://t.me/cibsecurity/66870 · Telegram Post
• https://t.me/cvenotify/54535 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/a4766651-92a6-42c9-81bc-7ea25350f561?source=cve · Note