Vulnerability in User Meta Plugin Allows Attackers to Obtain User Meta Values

CVE-2024-9262

Summary

The User Meta – User Profile Builder and User Management plugin for WordPress presents an Insecure Direct Object Reference vulnerability that affects all versions up to 3.1. This vulnerability arises from inadequate validation of user-controlled keys in the getUser() function. Authenticated attackers with Contributor-level access and higher can exploit this flaw to access sensitive user meta values from form fields. Furthermore, if a site administrator creates a form that reveals sensitive information, such as password hashes, the risk increases. Unauthenticated users may also exploit this vulnerability when the 'user-meta-public-profile' shortcode is improperly configured, allowing potential exposure of user data.

References