CVE-2023-0814 — Sensitive Information Exposure in Profile Builder

CWE-200 — Sensitive Information ExposureCWE-863 — Incorrect Authorization4 documents4 sources
Severity
6.5MEDIUMNVD
EPSS
0.3%
top 47.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cozmoslabs Profile Builder
Timeline
PublishedFeb 14
Latest updateJan 23

Description

The Profile Builder – User Profile & User Registration Forms plugin for WordPress is vulnerable to sensitive information disclosure via the [user_meta] shortcode in versions up to, and including 3.9.0. This is due to insufficient restriction on sensitive user meta values that can be called via that shortcode. This makes it possible for authenticated attackers, with subscriber-level permissions, and above to retrieve sensitive user meta that can be used to gain access to a high privileged user ac…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages1 packages

Patches

Patch: plugins.trac.wordpress.org ↗Patch: plugins.trac.wordpress.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-2pg6-wjcp-mmcq: The Profile Builder – User Profile & User Registration Forms plugin for WordPress is vulnerable to sensitive information disclosure via the [user_meta↗2023-07-06
▶
CVEList
Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Sensitive Information Disclosure via Shortcode↗2023-02-14
▶

📋Vendor Advisories

1
Chrome
Stable Channel Update for Desktop: CVE-2024-0814↗2024-01-23
▶
CVE-2023-0814 — Sensitive Information Exposure | cvebase