CVE-2024-0324

CVE-2024-0324 affects the WordPress plugin User Profile Builder (Profile Builder) up to version 3.10.8. The root cause is a missing capability check in the wppb_two_factor_authentication_settings_update function, allowing unauthenticated attackers to enable/disable 2FA for arbitrary user roles in...