CVE-2020-6859
First published: Mon Jan 13 2020(Updated: )
Multiple Insecure Direct Object Reference vulnerabilities in includes/core/class-files.php in the Ultimate Member plugin through 2.1.2 for WordPress allow remote attackers to change other users' profiles and cover photos via a modified user_id parameter. This is related to ajax_image_upload and ajax_resize_image.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ultimate Member | <=2.1.2 |
Remedy
https://github.com/ultimatemember/ultimatemember/commit/249682559012734a4f7d71f52609b2f301ea55b1
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/ultimatemember/ultimatemember/blob/627bbb0fae81ac34c60b43f0867eadcf8e1bc523/includes/core/class-files.php#L269
- https://github.com/ultimatemember/ultimatemember/blob/627bbb0fae81ac34c60b43f0867eadcf8e1bc523/includes/core/class-files.php#L310
- https://github.com/ultimatemember/ultimatemember/commit/249682559012734a4f7d71f52609b2f301ea55b1
- https://wordpress.org/plugins/ultimate-member/#developers
- https://wpvulndb.com/vulnerabilities/10041
Frequently Asked Questions
What is CVE-2020-6859?
CVE-2020-6859 is a vulnerability in the Ultimate Member plugin for WordPress that allows remote attackers to change other users' profiles and cover photos.
What is the severity of CVE-2020-6859?
CVE-2020-6859 has a severity rating of medium with a CVSS score of 5.3.
How does CVE-2020-6859 work?
CVE-2020-6859 exploits insecure direct object reference vulnerabilities in the Ultimate Member plugin's includes/core/class-files.php file, allowing attackers to modify user profiles by manipulating the user_id parameter.
Which version of the Ultimate Member plugin is affected by CVE-2020-6859?
The Ultimate Member plugin version 2.1.2 for WordPress is affected by CVE-2020-6859.
Is there a fix for CVE-2020-6859?
Yes, an official fix for CVE-2020-6859 has been released by the Ultimate Member plugin developers. It is recommended to update to the latest version of the plugin to mitigate the vulnerability.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/author
- agent/references
- agent/remedy
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ultimatemember
- canonical/ultimate member
- version/ultimate member/2.1.2