CVE-2020-6859 - Multiple Insecure Direct Object Reference vulnerabilities in includes/core/class-files.php in the Ultimate Member plugin through 2.1.2 for WordPress allow remote attackers to change other users' profiles and cover photos via a modified user_id parameter

Back Back to CVE browser

MEDIUM

Multiple Insecure Direct Object Reference vulnerabilities in includes/core/class-files.php in the Ultimate Member plugin through 2.1.2 for WordPress allow remote attackers to change other users' profiles and cover photos via a modified user_id parameter

Published Jan 13, 2020

5.3

MEDIUM

CVSS 3.1

EPSS 2.17%

Description

Multiple Insecure Direct Object Reference vulnerabilities in includes/core/class-files.php in the Ultimate Member plugin through 2.1.2 for WordPress allow remote attackers to change other users' profiles and cover photos via a modified user_id parameter. This is related to ajax_image_upload and ajax_resize_image.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-639

Authorization Bypass

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28001
Advisory
https://github.com/ultimatemember/ultimatemember/blob/627bbb0fae81ac34c60b43f0867eadcf8e1bc523/includes/core/class-files.php#L269
x_refsource_MISCThird Party Advisory
https://github.com/ultimatemember/ultimatemember/blob/627bbb0fae81ac34c60b43f0867eadcf8e1bc523/includes/core/class-files.php#L310
x_refsource_MISCThird Party Advisory
https://github.com/ultimatemember/ultimatemember/commit/249682559012734a4f7d71f52609b2f301ea55b1
x_refsource_CONFIRMPatchThird Party Advisory
https://wordpress.org/plugins/ultimate-member/#developers
x_refsource_MISCVendor Advisory
https://wpvulndb.com/vulnerabilities/10041
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28001		Advisory
https://github.com/ultimatemember/ultimatemember/blob/627bbb0fae81ac34c60b43f0867eadcf8e1bc523/includes/core/class-files.php#L269		x_refsource_MISCThird Party Advisory
https://github.com/ultimatemember/ultimatemember/blob/627bbb0fae81ac34c60b43f0867eadcf8e1bc523/includes/core/class-files.php#L310		x_refsource_MISCThird Party Advisory
https://github.com/ultimatemember/ultimatemember/commit/249682559012734a4f7d71f52609b2f301ea55b1		x_refsource_CONFIRMPatchThird Party Advisory
https://wordpress.org/plugins/ultimate-member/#developers		x_refsource_MISCVendor Advisory
https://wpvulndb.com/vulnerabilities/10041		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 13, 2020

Updated Aug 4, 2024

Reserved Jan 13, 2020

Link CVE-2020-6859

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-6859

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jan 13, 2020

Updated Aug 4, 2024

Link EUVD-2020-28001

GitHub

No data