PT-2024-22856 · WordPress · Wpfront User Role Editor

1337_Wannabe + 2 · Published 2024-04-02 · Updated 2025-03-04 · CVE-2024-2931

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions WPFront User Role Editor plugin for WordPress versions up to, and including, 3.2.1.11184

Description The issue allows authenticated attackers with subscriber-level access and above to extract a list of all user email addresses registered on the site. This is possible via the "wpfront user role editor assign roles user autocomplete" AJAX action.

Recommendations For versions up to, and including, 3.2.1.11184, consider disabling the wpfront user role editor assign roles user autocomplete AJAX action until a patch is available. Restrict access to this action to minimize the risk of exploitation. Avoid using the wpfront user role editor assign roles user autocomplete action in the affected plugin until the issue is resolved.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2024-2931

Affected Products

Wpfront User Role Editor

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-2931 · Security Note
• https://plugins.trac.wordpress.org/changeset/3061241/wpfront-user-role-editor/trunk/includes/users/class-assign-migrate.php · Patch
• https://osv.dev/vulnerability/CVE-2024-2931 · Vendor Advisory
• https://wordfence.com/threat-intel/vulnerabilities/id/078a0647-fc3a-436c-bf00-8776b16e66ff?source=cve · Note
• https://twitter.com/CVEnew/status/1775080387657572377 · Twitter Post
• https://t.me/cvenotify/113469 · Telegram Post
• https://inky-knuckle-2c2.notion.site/WPFront-User-Role-Editor-Information-disclosure-7435b8340a004f5f8485cad375326b2c · Note
• https://t.me/cvenotify/75448 · Telegram Post