CVE-2023-3713

Summary

CVE-2023-3713 is a vulnerability affecting the ProfileGrid plugin for WordPress. This issue stems from a missing capability check on the 'profile_magic_check_smtp_connection' function, which exists in versions up to 5.5.1. As a result, authenticated attackers with subscriber-level permissions or above can arbitrarily update site options, leading to privilege escalation. This vulnerability poses a significant risk, as it enables unauthorized modifications that could potentially compromise the entire WordPress site.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.