Vulnerabilityhigh
WordPress Plugin Flaw Exposes 40,000 Sites to Admin Takeover
AI summary · glm-5.3-flashSummaries by Vani AI
A critical unauthenticated flaw in the User Profile Builder WordPress plugin exposed roughly 40,000 sites to administrator account takeover.
Infosecurity Magazine reports a critical flaw in the User Profile Builder WordPress plugin that let unauthenticated attackers access administrator accounts. Approximately 40,000 sites were exposed to full admin takeover as a result. The report did not specify a CVE identifier or state whether exploitation was observed in the wild.
Key facts
- Unauthenticated attackers could gain access to administrator accounts via the plugin flaw
- About 40,000 WordPress sites were exposed to takeover
- No CVE id or confirmed exploitation details provided in the coverage
- Tags
- admin-takeoverplugin-vulnerabilityprivilege-escalationunauthenticateduser-profile-builderwordpress
- Products
- WordPressUser Profile Builder
From the original article
Critical User Profile Builder flaw let unauthenticated attackers access administrator accounts
infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.