CVE-2025-3924

Medium CVSS: 5.3

The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to unauthorized access of data via its publicly exposed reset-password endpoint. The plugin looks up the 'valid_email' value based solely on a supplied username parameter, without verifying that the requester is associated with that user account. This allows unauthenticated attackers to enumerate email addresses for any user, including administrators.

Vendor

Product

CWE

CWE-285

Yayın Tarihi

2025-05-07 03:15:18

Güncelleme

2025-05-07 14:13:20

Source Identifier

security@wordfence.com

KEV Date Added

Kategoriler

CWE-285 MEDIUM 2025

Referanslar

https://plugins.trac.wordpress.org/browser/peprodev-ups/tags/7.5.2/login/login.php#L1483 https://plugins.trac.wordpress.org/browser/peprodev-ups/tags/7.5.2/login/login.php#L2659 https://plugins.trac.wordpress.org/browser/peprodev-ups/tags/7.5.2/login/login.php#L2810 https://wordpress.org/plugins/peprodev-ups/#developers https://www.wordfence.com/threat-intel/vulnerabilities/id/7bb36c0f-68b3-492e-9f08-fe6228b0363f?source=cve