CVE-2023-3404
MediumCVSS 4.9Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
The ProfileGrid plugin for WordPress is vulnerable to unauthorized decryption of private information in versions up to and including 5.5.0. This is due to the passphrase and iv being hardcoded in the 'pm_encrypt_decrypt_pass' function, allowing authenticated attackers with administrator-level permissions to decrypt and view users' passwords.
Risk Assessment
The organization is at risk of exposing users' passwords, which could lead to further attacks and security breaches. If combined with another vulnerability, lower-privileged users may gain access to passwords.
Recommendation
It is recommended to update the ProfileGrid plugin to the latest version to mitigate this vulnerability. Additionally, conducting a user permissions audit and monitoring access to sensitive data is advisable.
Original NVD description (English source)
The ProfileGrid plugin for WordPress is vulnerable to unauthorized decryption of private information in versions up to, and including, 5.5.0. This is due to the passphrase and iv being hardcoded in the 'pm_encrypt_decrypt_pass' function and used across all sites running the plugin. This makes it possible for authenticated attackers, with administrator-level permissions or above to decrypt and view users' passwords. If combined with another vulnerability, this can potentially grant lower-privileged users access to users' passwords.