Vulnerability · Published Apr 5, 2021 · Assigned by WPScan
CVE-2021-24170User Profile Picture < 2.5.0 - Sensitive Information Disclosure
High 7.5
In plain English
A high-severity information exposure in User Profile Picture from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 5.6% (higher than 93% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Severity (CVSS NVD)7.5High
Exploit odds (30 days)5.6%top 7.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Nuclei
Official description
The REST API endpoint get_users in the User Profile Picture WordPress plugin before 2.5.0 returned more information than was required for its functionality to users with the upload_files capability. This included password hashes, hashed user activation keys, usernames, emails, and other less sensitive information.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | User Profile Picture | 2.5.0 – before 2.5.0 |
Weakness: CWE-200