Description

Multiple Insecure Direct Object Reference vulnerabilities in includes/core/class-files.php in the Ultimate Member plugin through 2.1.2 for WordPress allow remote attackers to change other users' profiles and cover photos via a modified user_id parameter. This is related to ajax_image_upload and ajax_resize_image.

Remediation

References

CVE-2020-6859

Related Vulnerabilities

WordPress Plugin WP SEO TDK Security Bypass (2.0.2)

PostgreSQL Improper Control of Dynamically-Managed Code Resources Vulnerability (CVE-2022-2625)

WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Request Forgery (3.4.27)

WordPress Plugin Members Import Cross-Site Request Forgery (1.3)

WordPress Plugin Modern Events Calendar Lite Multiple Vulnerabilities (5.16.2)

Severity

Medium

Classification

CVE-2020-6859 CWE-639 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities