ProfileGrid < 5.5.2 - Subscriber+ Arbitrary Option Update

2023-07-1800:00:00

wpscan.com

profilegrid

vulnerability

subscriber

arbitrary update

permission escalation

security flaw

potential attack

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.2%

JSON

Description The plugin does not implement an adequate capability check on the ‘profile_magic_check_smtp_connection’ function, making it possible for authenticated users with subscriber-level permissions or above to arbitrarily update the site options, leading to potential privilege escalation.

CPENameOperatorVersion
profilegrid-user-profiles-groups-and-communitieseq5.5.2

CPE	Name	Operator	Version
	profilegrid-user-profiles-groups-and-communities	eq	5.5.2

References

www.wordfence.com/threat-intel/vulnerabilities/id/473ba791-af99-4aae-99cb-ccf220e443e7