CVE-2024-9262 User Meta – User Profile Builder and User management plugin <= 3.1 - Insecure Direct Object Reference to Sensitive Information Exposure

🗓️ 09 Nov 2024 02:03:03Reported by WordfenceType

CVE-2024-9262 User Meta – User Profile Builder plugin <= 3.1 - Insecure Direct Object Referenc

Reporter	Title	Published	Views	Family All 5
Patchstack	WordPress User Meta Plugin <= 3.1 is vulnerable to Sensitive Data Exposure	8 Nov 202400:00	–	patchstack
Cvelist	CVE-2024-9262 User Meta – User Profile Builder and User management plugin <= 3.1 - Insecure Direct Object Reference to Sensitive Information Exposure	9 Nov 202402:03	–	cvelist
CVE	CVE-2024-9262	9 Nov 202403:15	–	cve
NVD	CVE-2024-9262	9 Nov 202403:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (November 4, 2024 to November 10, 2024)	14 Nov 202419:29	–	wordfence

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/user-meta/trunk/models/classes/generate/PublicProfile.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/4ed81348-7604-4858-bc8e-b4504d77ee45

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Nov 2024 02:03Current

6.3Medium risk

Vulners AI Score6.3

CVSS36.5

SSVCNaN

CWE-639