nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-6410 CVE-2024-6410
MEDIUM
ProfileGrid <= 5.8.9 - Authenticated (Subscriber+) Insecure Direct Object Reference
Record summary
CVE-2024-6410 has a selected CVSS score of 4.3 (medium).
Description
The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.8.9 via the 'pm_upload_image' function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change the profile picture of any user.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 10, 2024 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
ProfileGrid – User Profiles, Groups and CommunitiesBrowse metagauss / ProfileGrid – User Profiles, Groups and CommunitiesDefault status: unaffected | CVE List | Through 5.8.9 | affected |
profilegridBrowse metagauss / profilegridDefault status: unaffected | CVE List | Through 5.8.9 | affected |
References
4plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/js/profile-magic-admin-power.js plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/changeset/3111609/profilegrid-user-profiles-groups-and-communities/trunk/public/partials/crop.php wordfence.com
https://www.wordfence.com/threat-intel/vulnerabilities/id/8679f4cd-2cb8-48ad-a531-a00c1b85ed2e?source=cve