PT-2025-19906 · Peprodev · Peprodev Ultimate Profile Solutions

Kenneth Dunn · Published 2025-05-07 · Updated 2025-05-12 · CVE-2025-3844

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PeproDev Ultimate Profile Solutions versions 1.9.1 through 7.5.2

Description The issue is related to the lack of proper authentication in the handel ajax req() function, specifically with the change user meta functionality. This allows attackers to set an OTP code and log in with it, enabling unauthenticated attackers to log in as other users on the site, including administrators.

Recommendations For versions 1.9.1 through 7.5.2, consider disabling the handel ajax req() function or restricting access to the change user meta functionality until a patch is available. Additionally, restrict the ability to set OTP codes to authenticated users only to minimize the risk of exploitation.

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2025-3844

Affected Products

Peprodev Ultimate Profile Solutions

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-3844 · Security Note
• https://t.me/latest_high_impact_cve/2296 · Telegram Post
• https://t.me/cvetracker/23223 · Telegram Post
• https://twitter.com/cybercronai/status/1920135424858558949 · Twitter Post
• https://t.me/cvenotify/121141 · Telegram Post
• https://plugins.trac.wordpress.org/browser/peprodev-ups/tags/7.5.2/login/login.php#L1483 · Note
• https://twitter.com/cracbot/status/1921883122846912545 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/65be9417-7029-4f34-b834-98208a42743b?source=cve · Note
• https://plugins.trac.wordpress.org/browser/peprodev-ups/tags/7.5.2/login/login.php#L2836 · Note
• https://t.me/cvedetector/24671 · Telegram Post