CVE-2023-3714
First published: Tue Jul 18 2023(Updated: )
The ProfileGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'edit_group' handler in versions up to, and including, 5.5.2. This makes it possible for authenticated attackers, with group ownership, to update group options, including the 'associate_role' parameter, which defines the member's role. This issue was partially patched in version 5.5.2 preventing privilege escalation, however, it was fully patched in 5.5.3.
Credit: security@wordfence.com security@wordfence.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Metagauss Profilegrid | <5.5.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/tags/5.4.8/public/partials/profile-magic-group.php#L80
- https://plugins.trac.wordpress.org/changeset/2938904/profilegrid-user-profiles-groups-and-communities#file4
- https://plugins.trac.wordpress.org/changeset/2939344/profilegrid-user-profiles-groups-and-communities/trunk/public/partials/profile-magic-group.php
- https://www.wordfence.com/threat-intel/vulnerabilities/id/a4766651-92a6-42c9-81bc-7ea25350f561?source=cve
Frequently Asked Questions
What is the vulnerability ID for the ProfileGrid plugin for WordPress?
The vulnerability ID for the ProfileGrid plugin for WordPress is CVE-2023-3714.
What is the severity level of CVE-2023-3714?
The severity level of CVE-2023-3714 is high with a score of 8.8.
What is the affected software of CVE-2023-3714?
The affected software is the ProfileGrid plugin for WordPress versions up to, and including, 5.5.2.
How can authenticated attackers exploit this vulnerability?
Authenticated attackers, with group ownership, can exploit this vulnerability by updating group options, including unauthorized modification of data.
Is there a fix available for CVE-2023-3714?
Yes, please refer to the references provided for the fix to CVE-2023-3714.
- collector/nvd-latest
- collector/nvd-api
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/metagauss
- canonical/metagauss profilegrid