CVE-2023-2448

The UserPro plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'userpro_shortcode_template' function in versions up to, and including, 5.1.4. This makes it possible for unauthenticated attackers to arbitrary shortcode execution. An attacker can leverage CVE-2023-2446 to get sensitive information via shortcode.

• CWE-862
• CWE-862

• https://codecanyon.net/item/userpro-user-profiles-with-social-login/5958681Product
• https://www.wordfence.com/threat-intel/vulnerabilities/id/7cbe9175-4a6f-4eb6-8d31-9a9fda9b4f40?source=cveThird Party Advisory
• http://packetstormsecurity.com/files/175871/WordPress-UserPro-5.1.x-Password-Reset-Authentication-Bypass-Escalation.htmlThird Party Advisory, VDB Entry
• https://codecanyon.net/item/userpro-user-profiles-with-social-login/5958681Product
• https://www.wordfence.com/threat-intel/vulnerabilities/id/7cbe9175-4a6f-4eb6-8d31-9a9fda9b4f40?source=cveThird Party Advisory

Published

Nov 22, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-24474Experion server may experience a DoS due to a heap overflow …7.5
• CVE-2023-24475Out of bounds read in some Intel(R) Server Board BMC firmwar…4.4
• CVE-2023-24476 An attacker with local access to the machine could record t…3.3
• CVE-2023-24477In certain conditions, depending on timing and the usage of …7
• CVE-2023-24478Use of insufficiently random values for some Intel Agilex(R)…5.5
• CVE-2023-24479An authentication bypass vulnerability exists in the httpd n…9.8
• CVE-2023-24480Controller DoS due to stack overflow when decoding a message…7.5
• CVE-2023-24481Improper access control in some Intel(R) Thunderbolt(TM) DCH…6.3
• CVE-2023-24482A vulnerability has been identified in COMOS V10.2 (All vers…9.8
• CVE-2023-24483A vulnerability has been identified that, if exploited, coul…7.8
• CVE-2023-24484A malicious user can cause log files to be written to a dire…5.5
• CVE-2023-24485Vulnerabilities have been identified that, collectively, all…7.8