CVE-2023-3713
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
The ProfileGrid plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'profile_magic_check_smtp_connection' function in versions up to and including 5.5.1. This allows authenticated attackers with subscriber-level permissions or above to arbitrarily update site options.
Risk Assessment
Attackers can exploit this vulnerability to achieve privilege escalation, potentially leading to serious security breaches within the organization.
Recommendation
It is recommended to update the ProfileGrid plugin to the latest version to mitigate this vulnerability and to conduct a user permissions audit.
Other vulnerabilities in ProfileGrid plugin for WordPress
See all- CVE-2023-3404Medium
The ProfileGrid plugin for WordPress is vulnerable to unauthorized decryption of private information in versions up to and including 5.5.0. This is due to the passphrase and iv being hardcoded in the 'pm_encrypt_decrypt_pass' function, allowing authenticated attackers with administrator-level permissions to decrypt and view users' passwords.
- CVE-2023-3714High
The ProfileGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'edit_group' handler in versions up to and including 5.5.2. This allows authenticated attackers with group ownership to update group options, including the 'associate_role' parameter, which defines the member's role.
- CVE-2023-3403Medium
The ProfileGrid plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'pm_upload_csv' function in versions up to and including 5.5.1. This allows authenticated attackers with subscriber-level permissions or higher to import new users and update existing users.
Original NVD description (English source)
The ProfileGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'profile_magic_check_smtp_connection' function in versions up to, and including, 5.5.1. This makes it possible for authenticated attackers, with subscriber-level permissions or above to update the site options arbitrarily. This can be used by attackers to achieve privilege escalation.