PeproDev Ultimate Profile Solutions Authentication Bypass Vulnerability Allowing Account Takeover
Vulnerability
A vulnerability allowing authentication bypass has been identified in the PeproDev Ultimate Profile Solutions plugin for WordPress, affecting versions 1.9.1 through 7.5.2. The issue arises because the 'handel_ajax_req()' function lacks proper restrictions on the 'change_user_meta' functionality. This flaw enables unauthenticated attackers to set a one-time password (OTP) code and log in as other users, including administrators.
Impact
Exploitation of this vulnerability allows unauthenticated users to log in as other users, potentially including administrators, leading to unauthorized access and actions on behalf of those users.
Remediation
No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.