github.com
https://github.com/ultimatemember/ultimatemember/blob/7b8a7a7c039bde4539c07e049b19036192f1c133/includes/admin/class-admin.php CVE-2024-8520
MEDIUM
Ultimate Member <= 2.8.6 - Cross-Site Request Forgery to Membership Status Change
Record summary
CVE-2024-8520 has a selected CVSS score of 5.3 (medium).
Description
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.6. This is due to missing or incorrect nonce validation on the admin_init or user_action_hook function. This makes it possible for unauthenticated attackers to modify a users membership status via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 4, 2024 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership PluginBrowse ultimatemember / Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership PluginDefault status: unaffected | CVE List | Through 2.8.6 | affected |
ultimate_memberBrowse ultimatemember / ultimate_memberDefault status: unaffected | CVE List | Through 2.8.6 | affected |
References
6github.com
https://github.com/ultimatemember/ultimatemember/blob/7b8a7a7c039bde4539c07e049b19036192f1c133/includes/admin/core/class-admin-users.php github.com
https://github.com/ultimatemember/ultimatemember/pull/1549 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-8520 plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/changeset/3160947/ultimate-member/trunk/includes/admin/class-admin.php wordfence.com
https://www.wordfence.com/threat-intel/vulnerabilities/id/7ffddc03-d4ae-460e-972a-98804d947d09?source=cve