ProfileGrid WordPress Plugin Under Investigation for Critical Vulnerability
The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is under investigation for a critical vulnerability that could allow privilege escalation via account takeover in all versions up to 5.9.9.5.
What happened
Reportedly, the vulnerability exists due to the plugin's failure to validate a `user_login` parameter on registration forms that don't contain this parameter, and improper handling of error messages. This could potentially allow unauthenticated attackers to change the email address of the user account with ID=1, typically an administrator, and leverage this to reset the user's password and gain access to their account. The severity of this vulnerability is rated as CRITICAL with a CVSS score of 9.8. It is recommended to upgrade to the latest version of the ProfileGrid plugin and review user accounts for any unauthorized changes. Primary sources should be consulted for the most current information and detailed technical specifics.
How 0Day mitigates this
profilegrid-user-profiles-groups-and-communities is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.