CVE-2021-24170 User Profile Picture < 2.5.0 - Sensitive Information Disclosure
The User Profile Picture WordPress plugin exposed sensitive user data like password hashes and emails via its REST API to users with upload capabilities.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-24170?
CVE-2021-24170 is a high-severity vulnerability in Unknown User Profile Picture, published on 5 Apr 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The REST API endpoint get_users in the User Profile Picture WordPress plugin before 2.5.0 returned more information than was required for its functionality to users with the upload_files capability. This included password hashes, hashed user activation keys, usernames, emails, and other less sensitive information.
Weakness: CWE-200
Which versions are affected by CVE-2021-24170?
It affects 1 product.
Products include Cozmoslabs User Profile Picture.
How do I fix CVE-2021-24170?
No fix has been published for CVE-2021-24170 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-24170 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2021-24170 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in Unknown User Profile Picture
Sources
Also known as GHSA-rgpr-gv7f-4cf5.