{"id":"CVE-2024-6695","state":"PUBLISHED","title":"profile-builder <= 3.11.8 - Unauthenticated Privilege Escalation","description":"it's possible for an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized actions. This is due to improper logic flow on the user registration process.","publishedAt":"2024-07-31T06:00:04.649Z","updatedAt":"2024-07-31T15:06:31.038Z","severity":{"score":9.8,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"WPScan","products":["Unknown User Profile Builder"],"affected":[{"vendor":"Unknown","product":"User Profile Builder","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"3.11.9","versionType":"semver"}]}],"references":["https://wpscan.com/vulnerability/4afa5c85-ce27-4ca7-bba2-61fb39c53a5b/"],"weaknesses":[],"ingestedAt":"2026-10-29T20:08:12.933Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/6xxx/CVE-2024-6695.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-6695","state":"PUBLISHED","datePublished":"2024-07-31T06:00:04.649Z","dateUpdated":"2024-07-31T15:06:31.038Z","assignerShortName":"WPScan","assignerOrgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","dateReserved":"2024-07-11T15:11:55.425Z"},"containers":{"cna":{"title":"profile-builder <= 3.11.8 - Unauthenticated Privilege Escalation","descriptions":[{"lang":"en","value":"it's possible for an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized actions. This is due to improper logic flow on the user registration process."}],"affected":[{"vendor":"Unknown","product":"User Profile Builder","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"3.11.9","versionType":"semver"}]}],"references":[{"url":"https://wpscan.com/vulnerability/4afa5c85-ce27-4ca7-bba2-61fb39c53a5b/","tags":["exploit","vdb-entry","technical-description"]}],"problemTypes":[{"descriptions":[{"description":"CWE-287 Improper Authentication","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"WPScan","orgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","dateUpdated":"2024-07-31T06:00:04.649Z"},"credits":[{"lang":"en","value":"John Castro","type":"finder"},{"lang":"en","value":"WPScan","type":"coordinator"}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"WPScan CVE Generator"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"cozmoslabs","product":"profile_builder","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"3.11.9","versionType":"semver"}],"cpes":["cpe:2.3:a:cozmoslabs:profile_builder:*:*:*:*:*:wordpress:*:*"]}],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2024-07-31T15:04:31.418676Z","id":"CVE-2024-6695","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-31T15:06:31.038Z"}}]}}}