CVE-2024-9947 ProfilePress - Pro <= 4.11.1 - Authentication Bypass via WordPress.com OAuth provider

What is CVE-2024-9947?

CVE-2024-9947 is a high-severity authentication bypass vulnerability in ProfilePress Pro, published on 23 Oct 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The ProfilePress Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.11.1. This is due to insufficient verification on the user being returned by the social login token. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email and the user does not have an already-existing account for the service returning the token.

Weakness: CWE-276, CWE-287

Which versions are affected by CVE-2024-9947?

It affects 1 product.

Products include Properfraction Profilepress.

How do I fix CVE-2024-9947?

No fix has been published for CVE-2024-9947 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2024-9947 being exploited?

There is no known exploitation of CVE-2024-9947 in the wild and no public exploit code.

Other vulnerabilities in ProfilePress Pro

• CVE-2021-34621 ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation Critical 9.8
• CVE-2021-34622 ProfilePress 3.0 - 3.1.3 - Authenticated Privilege Escalation Critical 9.8
• CVE-2021-34623 ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in Image Uploader Component Critical 9.8
• CVE-2021-34624 ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in File Uploader Component Critical 9.8
• CVE-2023-41954 WordPress ProfilePress plugin <= 4.13.1 - Unauthenticated Limited Privilege Escalation vulnerability High 8.6

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-5438-xrx8-q93j.