CVE-2024-0701

The UserPro plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 5.1.6. This is due to the use of client-side restrictions to enforce the 'Disabled registration' Membership feature within the plugin's General settings. This makes it possible for unauthenticated attackers to register an account even when account registration has been disabled by an administrator.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://codecanyon.net/item/userpro-user-profiles-with-social-login/5958681	Patch
https://www.wordfence.com/threat-intel/vulnerabilities/id/ea070d9c-c04c-432f-a110-47b9eaa67614?source=cve	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:userproplugin:userpro:*:*:*:*:*:wordpress:*:*

History

13 Feb 2024, 17:03

Type	Values Removed	Values Added
CWE		NVD-CWE-noinfo
First Time		Userproplugin Userproplugin userpro
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 5.3
CPE		cpe:2.3:a:userproplugin:userpro::::::wordpress::*
References	~~() https://codecanyon.net/item/userpro-user-profiles-with-social-login/5958681 -~~	() https://codecanyon.net/item/userpro-user-profiles-with-social-login/5958681 - Patch
References	~~() https://www.wordfence.com/threat-intel/vulnerabilities/id/ea070d9c-c04c-432f-a110-47b9eaa67614?source=cve -~~	() https://www.wordfence.com/threat-intel/vulnerabilities/id/ea070d9c-c04c-432f-a110-47b9eaa67614?source=cve - Third Party Advisory

05 Feb 2024, 22:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-02-05 22:16

Updated : 2024-02-28 20:54

NVD link : CVE-2024-0701

Mitre link : CVE-2024-0701

CVE.ORG link : CVE-2024-0701

JSON object : View

Products Affected

userproplugin

userpro

CWE

NVD-CWE-noinfo

{"id": "CVE-2024-0701", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "security@wordfence.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2024-02-05T22:16:04.380", "references": [{"url": "https://codecanyon.net/item/userpro-user-profiles-with-social-login/5958681", "tags": ["Patch"], "source": "security@wordfence.com"}, {"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ea070d9c-c04c-432f-a110-47b9eaa67614?source=cve", "tags": ["Third Party Advisory"], "source": "security@wordfence.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "The UserPro plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 5.1.6. This is due to the use of client-side restrictions to enforce the 'Disabled registration' Membership feature within the plugin's General settings. This makes it possible for unauthenticated attackers to register an account even when account registration has been disabled by an administrator."}, {"lang": "es", "value": "El complemento UserPro para WordPress es vulnerable a la omisi\u00f3n de funciones de seguridad en todas las versiones hasta la 5.1.6 incluida. Esto se debe al uso de restricciones del lado del cliente para aplicar la funci\u00f3n de Membres\u00eda \"Registro deshabilitado\" dentro de la configuraci\u00f3n general del complemento. Esto hace posible que atacantes no autenticados registren una cuenta incluso cuando un administrador haya desactivado el registro de la cuenta."}], "lastModified": "2024-02-13T17:03:49.577", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:userproplugin:userpro:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "4435E376-1DD8-4C50-89F9-4013B5ABBF3C", "versionEndIncluding": "5.1.6"}], "operator": "OR"}]}], "sourceIdentifier": "security@wordfence.com"}