User Registration And User Profile CVEs and Security Vulnerabilities

CVE-2024-9518

UserPlus <= 2.0 - Unauthenticated Privilege Escalation

The UserPlus plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.0 due to insufficient restriction on the 'form_actions' and 'userplus_update_user_profile' functions. This makes it possible for unauthenticated attackers to specify their user role by supplying the 'role' parameter during a registration.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Userplus Wpuserplus

Products

User Registration And User Profile Userplus

CVE-2024-9519

UserPlus <= 2.0 - Authenticated (Editor+) Registration Form Update to Privilege Escalation

The UserPlus plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the 'save_metabox_form' function in versions up to, and including, 2.0. This makes it possible for authenticated attackers, with editor-level permissions or above, to update the registration form role to administrator, which leads to privilege escalation.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed