nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-6411 CVE-2024-6411
HIGH
ProfileGrid – User Profiles, Groups and Communities <= 5.8.9 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation
Record summary
CVE-2024-6411 has a selected CVSS score of 8.8 (high).
Description
The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 5.8.9. This is due to a lack of validation on user-supplied data in the 'pm_upload_image' AJAX action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update their user capabilities to Administrator.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 10, 2024 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
ProfileGrid – User Profiles, Groups and CommunitiesBrowse metagauss / ProfileGrid – User Profiles, Groups and CommunitiesDefault status: unaffected | CVE List | Through 5.8.9 | affected |
profilegridBrowse metagauss / profilegridDefault status: unaffected | CVE List | Before 5.8.9 | affected |
References
6plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/js/profile-magic-admin-power.js plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/partials/coverimg_crop.php plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/partials/crop.php plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/changeset/3111609 wordfence.com
https://www.wordfence.com/threat-intel/vulnerabilities/id/2ef3c7fb-27f5-4829-8cb6-d3a52778a689?source=cve