User Profile Builder WordPress Plugin Insecure Direct Object Reference Vulnerability

A vulnerability allowing Insecure Direct Object Reference has been identified in the User Profile Builder WordPress plugin, specifically in versions 3.15.5 and earlier. The issue arises in the wppb_save_avatar_value() function, where validation is lacking on a user-controlled key. This flaw enables authenticated attackers with subscriber-level access or higher to change the ownership of any post or attachment by modifying the 'post_author' field.

Impact

Exploitation of this vulnerability allows for unauthorized reassignment of post and attachment ownership, potentially leading to misuse of post authorship privileges.

Remediation

Users are advised to update the User Profile Builder plugin to version 3.15.6 or later.