Description

Multiple Insecure Direct Object Reference vulnerabilities in includes/core/class-files.php in the Ultimate Member plugin through 2.1.2 for WordPress allow remote attackers to change other users' profiles and cover photos via a modified user_id parameter. This is related to ajax_image_upload and ajax_resize_image.

Remediation

References

CVE-2020-6859

Related Vulnerabilities

Apache 2.2.14 mod_isapi Dangling Pointer

osTicket Other Vulnerability (CVE-2005-1436)

PHP Improper Input Validation Vulnerability (CVE-2016-10397)

Oracle Database Server CVE-2020-2735 Vulnerability (CVE-2020-2735)

WordPress Plugin Check & Log Email Cross-Site Scripting (0.3)

Severity

Medium

Classification

CVE-2020-6859 CWE-639 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities