PT-2025-6605 · WordPress · Profilegrid

Tim Coen · Published 2025-02-18 · Updated 2025-02-24 · CVE-2024-13740

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions ProfileGrid – User Profiles, Groups and Communities plugin for WordPress versions up to, and including, 5.9.4.2

Description The issue allows authenticated attackers with Subscriber-level access and above to read private conversations of other users due to missing validation on a user-controlled key in the pm messenger show messages function. This enables them to exploit the Insecure Direct Object Reference vulnerability.

Recommendations For versions up to, and including, 5.9.4.2, consider disabling the pm messenger show messages function as a temporary workaround until a patch is available. Restrict access to private conversations to minimize the risk of exploitation. Avoid using the vulnerable function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2024-13740

Affected Products

Profilegrid

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2024-13740 · Security Note
• https://osv.dev/vulnerability/CVE-2024-13740 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1891693388925223178 · Twitter Post
• https://twitter.com/CVEnew/status/1891683289242706238 · Twitter Post
• https://t.me/cvenotify/111577 · Telegram Post
• https://t.me/cvenotify/112239 · Telegram Post
• https://t.me/cvedetector/18273 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/c2a1b1a4-df72-4666-b116-882af4cd5796?source=cve · Note
• https://twitter.com/CVETracker/status/1891940980108013822 · Twitter Post
• https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/tags/5.9.4.2/public/class-profile-magic-public.php#L1299 · Note