CVE-2023-2297 — Improper Authentication in Profile Builder

CWE-287 — Improper AuthenticationCWE-620 — Unverified Password Change3 documents3 sources
Severity
8.1HIGHNVD
CNA6.5
EPSS
0.2%
top 52.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cozmoslabs Profile Builder
Timeline
PublishedApr 27
Latest updateJul 6

Description

The Profile Builder – User Profile & User Registration Forms plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 3.9.0. This is due to the plugin using native password reset functionality, with insufficient validation on the password reset function (wppb_front_end_password_recovery). The function uses the plaintext value of a password reset key instead of a hashed value which means it can easily be retrieved and subsequently used. An attacker can l…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:NExploitability: 2.8 | Impact: 5.2

Affected Packages1 packages

Patches

Patch: plugins.trac.wordpress.org ↗Patch: www.wordfence.com ↗Patch: plugins.trac.wordpress.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-5r3c-cq8h-c6gx: The Profile Builder – User Profile & User Registration Forms plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and↗2023-07-06
▶
CVEList
Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Insecure Password Reset Mechanism↗2023-04-26
▶
CVE-2023-2297 — Improper Authentication | cvebase