Critical · published May 7, 2025
🚨 Your users' accounts are at serious risk! A sneaky authentication bypass in the PeproDev Ultimate Profile Solutions plugin could let attackers waltz right in as any user — even admins! 🔥 Think of your WordPress site as a VIP event where only certain guests should have access. This vulnerability is like an unvetted guest slipping in through the back door, dressing up as the host and mingling freely with everyone — a recipe for chaos! An unauthenticated attacker could exploit this flaw to log in as any user on the site, potentially gaining full admin privileges. This means they could view sensitive data, modify site settings, or even take the site down entirely! Imagine the disaster if they change critical settings or delete essential content — absolutely devastating!
Think of your WordPress site as a VIP event where only certain guests should have access. This vulnerability is like an unvetted guest slipping in through the back door, dressing up as the host and mingling freely with everyone — a recipe for chaos! The issue lies in the `handel_ajax_req()` function of the PeproDev Ultimate Profile Solutions plugin, which lacks proper restrictions around the `change_user_meta` functionality. This allows attackers to set a one-time password (OTP) and log in without any authentication.
An unauthenticated attacker could exploit this flaw to log in as any user on the site, potentially gaining full admin privileges. This means they could view sensitive data, modify site settings, or even take the site down entirely! Imagine the disaster if they change critical settings or delete essential content — absolutely devastating! To protect your site, update the PeproDev Ultimate Profile Solutions plugin to version 7.5.3 or later immediately. Additionally, review your user access settings and ensure that only authorized users can modify meta information. Regularly audit your plugins for vulnerabilities to stay ahead of attacks. You’ve got this! Patch up, take action, and keep your site secure! 🛡️