ProfilePress WordPress Plugin Unauthenticated Arbitrary Shortcode Execution Vulnerability

A vulnerability allowing arbitrary shortcode execution has been identified in the ProfilePress WordPress plugin, specifically in versions through 4.16.4. This issue arises because the plugin does not properly validate user input before executing shortcodes, enabling unauthenticated users to execute arbitrary shortcodes on the site.

Impact

Exploitation of this vulnerability could lead to unauthorized users executing shortcodes, which may include actions like modifying user profiles or accessing sensitive information.

Reproduction

The vulnerability can be reproduced by sending a request to a site with the affected version of the ProfilePress plugin. The request must include a shortcode that the attacker wishes to execute. Since the vulnerability allows for arbitrary shortcode execution, any valid shortcode could be used, potentially including those that modify user data or access sensitive information.

Remediation

Users are advised to update the ProfilePress WordPress plugin to version 4.16.5 or later, where this vulnerability has been patched.