PT-2024-15470 · WordPress · User Profile Builder

Kodai Kubono + 1 · Published 2024-02-05 · Updated 2024-02-13 · CVE-2024-0324

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress versions up to, and including, 3.10.8

Description The issue is related to a missing capability check on the wppb two factor authentication settings update function, allowing unauthorized modification of data. This enables unauthenticated attackers to enable or disable the 2FA functionality for arbitrary user roles in the Premium version of the plugin.

Recommendations For versions up to, and including, 3.10.8, update to a version later than 3.10.8 to resolve the issue. As a temporary workaround, consider disabling the wppb two factor authentication settings update function until a patch is available.

Fix

Improper Access Control

Missing Authorization

Weakness Enumeration

CWE-284

CWE-862

Related Identifiers

CVE-2024-0324

Affected Products

User Profile Builder

References · 7

• https://osv.dev/vulnerability/CVE-2024-0324 · Vendor Advisory
• https://plugins.trac.wordpress.org/changeset/3022354 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-0324 · Security Note
• https://t.me/cvenotify/71294 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/23caef95-36b6-40aa-8dd7-51a376790a40?source=cve · Note
• https://github.com/WordpressPluginDirectory/profile-builder/blob/main/profile-builder/admin/admin-functions.php#L517 · Note
• https://twitter.com/CVEnew/status/1754620544463335429 · Twitter Post