CVE-2023-0940 ProfileGrid < 5.3.1 - Subscriber+ Arbitrary Password Reset
Low-privilege users can reset passwords for any account, including administrators, due to missing authorization checks in the password reset endpoint.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-0940?
CVE-2023-0940 is a high-severity missing authorization vulnerability in Unknown ProfileGrid, published on 20 Mar 2023. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The ProfileGrid WordPress plugin before 5.3.1 provides an AJAX endpoint for resetting a user password but does not implement proper authorization. This allows a user with low privileges, such as subscriber, to change the password of any account, including Administrator ones.
Weakness: CWE-863
Which versions are affected by CVE-2023-0940?
It affects 1 product.
Products include Metagauss Profilegrid.
How do I fix CVE-2023-0940?
No fix has been published for CVE-2023-0940 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2023-0940 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-0940 exists.
Other vulnerabilities in Unknown ProfileGrid
- CVE-2024-30490 WordPress ProfileGrid plugin <= 5.7.8 - SQL Injection vulnerability
- CVE-2025-0724 ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.5 - Authenticated (Subscriber+) PHP Object Injection
- CVE-2024-6411 Privilege escalation in ProfileGrid – User Profiles, Groups and Communities
- CVE-2023-3713 ProfileGrid <= 5.5.1 - Authenticated (Subscriber+) Arbitrary Option Update
- CVE-2019-15873 Code injection in n/a
Sources
Also known as GHSA-7q2h-f39x-vgg4.