CVE-2023-3460 Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation
Unauthenticated attackers can create administrator accounts due to missing capability checks in the Ultimate Member WordPress plugin.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-3460?
CVE-2023-3460 is a critical vulnerability in Unknown Ultimate Member, published on 4 Jul 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Ultimate Member WordPress plugin before 2.6.7 does not prevent visitors from creating user accounts with arbitrary capabilities, effectively allowing attackers to create administrator accounts at will. This is actively being exploited in the wild.
Which versions are affected by CVE-2023-3460?
It affects 1 product.
Products include Ultimatemember Ultimate Member.
How do I fix CVE-2023-3460?
No fix has been published for CVE-2023-3460 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-3460 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-3460 exists.
Public exploit code: 1 Exploit-DB entry, 1 Nuclei template and 10 proofs of concept on GitHub.
Other vulnerabilities in Unknown Ultimate Member
- CVE-2020-36155 Privilege escalation in n/a
- CVE-2020-36157 Privilege escalation in n/a
- CVE-2020-36156 Privilege escalation in n/a
- CVE-2024-1071 SQL injection in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
- CVE-2019-10270 Auth bypass in n/a
Sources
Also known as GHSA-77j3-wqmc-3rp8.