Lucene search
PRIOn knowledge basePRION:CVE-2023-0940HistoryMar 20, 2023 - 4:15 p.m.
Authorization
2023-03-2016:15:00
PRIOn knowledge base
www.prio-n.com
2
profilegrid
wordpress
plugin
authorization
password resets
low privileges
The ProfileGrid WordPress plugin before 5.3.1 provides an AJAX endpoint for resetting a user password but does not implement proper authorization. This allows a user with low privileges, such as subscriber, to change the password of any account, including Administrator ones.
| CPE | Name | Operator | Version |
|---|---|---|---|
| profilegrid | lt | 5.3.1 |
Related
cvelist
cvelist
CVE-2023-0940 ProfileGrid < 5.3.1 - Subscriber+ Arbitrary Password Reset
2023-03-20 15:52:16
cve
cve
CVE-2023-0940
2023-03-20 16:15:12
nvd
nvd
CVE-2023-0940
2023-03-20 16:15:12
wordfence
wordfence