CVE-2023-2297: SQL Injection
First published: Wed Apr 26 2023(Updated: )
The Profile Builder – User Profile & User Registration Forms plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 3.9.0. This is due to the plugin using native password reset functionality, with insufficient validation on the password reset function (wppb_front_end_password_recovery). The function uses the plaintext value of a password reset key instead of a hashed value which means it can easily be retrieved and subsequently used. An attacker can leverage CVE-2023-0814, or another vulnerability like SQL Injection in another plugin or theme installed on the site to successfully exploit this vulnerability.
Credit: security@wordfence.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cozmoslabs Profile Builder | <=3.9.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://lana.codes/lanavdb/512e7307-04a5-4d8b-8f79-f75f37784a9f/
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2864329%40profile-builder&new=2864329%40profile-builder&sfp_email=&sfph_mail=
- https://www.wordfence.com/blog/2023/03/vulnerability-patched-in-cozmolabs-profile-builder-plugin-information-disclosure-leads-to-account-takeover/
- https://www.wordfence.com/threat-intel/vulnerabilities/id/e731292a-4f95-46eb-889e-b00d58f3444e?source=cve
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
CVE-2023-2297
What is the severity of CVE-2023-2297?
The severity of CVE-2023-2297 is critical with a CVSS score of 8.1.
What is affected by CVE-2023-2297?
The Profile Builder – User Profile & User Registration Forms plugin for WordPress versions up to, and including 3.9.0 is affected by CVE-2023-2297.
What is the cause of CVE-2023-2297?
CVE-2023-2297 is caused by the plugin using native password reset functionality with insufficient validation.
How can CVE-2023-2297 be fixed?
To fix CVE-2023-2297, update the Profile Builder – User Profile & User Registration Forms plugin to version 3.9.1 or higher.
- collector/nvd-index
- agent/references
- agent/type
- agent/remedy
- agent/softwarecombine
- agent/severity
- agent/weakness
- agent/author
- agent/description
- agent/first-publish-date
- agent/tags
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- vendor/cozmoslabs
- canonical/cozmoslabs profile builder
- version/cozmoslabs profile builder/3.9.0