CVE-2025-3924
PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Missing Authorization to Unauthenticated Email Enumeration
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to unauthorized access of data via its publicly exposed reset-password endpoint. The plugin looks up the 'valid_email' value based solely on a supplied username parameter, without verifying that the requester is associated with that user account. This allows unauthenticated attackers to enumerate email addresses for any user, including administrators.
| CWE | CWE-285 |
| Vendor | peprodev |
| Product | peprodev ultimate profile solutions |
| Published | May 7, 2025 |
| Last Updated | May 7, 2025 |
Stay Ahead of the Next One
Get instant alerts for peprodev peprodev ultimate profile solutions
Be the first to know when new medium vulnerabilities affecting peprodev peprodev ultimate profile solutions are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
peprodev / PeproDev Ultimate Profile Solutions
1.9.1 ≤ 7.5.2
References
wordfence.com: https://www.wordfence.com/threat-intel/vulnerabilities/id/7bb36c0f-68b3-492e-9f08-fe6228b0363f?source=cve plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/peprodev-ups/tags/7.5.2/login/login.php#L1483 wordpress.org: https://wordpress.org/plugins/peprodev-ups/#developers plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/peprodev-ups/tags/7.5.2/login/login.php#L2659 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/peprodev-ups/tags/7.5.2/login/login.php#L2810
Credits
Kenneth Dunn