CVE-2023-6504CWE-639

Profile Builder <= 3.10.7 - Insecure Direct Object Reference to Sensitive Information Exposure via user_meta Shortcode

Medium · published January 11, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
27.0
In the wild
Unconfirmed
What it is

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the wppb_toolbox_usermeta_handler function in all versions up to, and including, 3.10.7. This makes it possible for authenticated attackers, with contributor-level access and above, to expose sensitive information within user metadata.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00346 · 27.0th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2024-01-11T08:33Z
EPSS history
Timeline
  • 11 JAN 08:33Z
    Profile Builder <= 3.10.7 - Insecure Direct Object Reference to Sensitive Information Exposure via user_meta Shortcode
    cvelistv5