CVE-2025-3924

The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to unauthorized access of data via its publicly exposed reset-password endpoint. The plugin looks up the 'valid_email' value based solely on a supplied username parameter, without verifying that the requester is associated with that user account. This allows unauthenticated attackers to enumerate email addresses for any user, including administrators.

• CWE-285

• https://plugins.trac.wordpress.org/browser/peprodev-ups/tags/7.5.2/login/login.php#L1483
• https://plugins.trac.wordpress.org/browser/peprodev-ups/tags/7.5.2/login/login.php#L2659
• https://plugins.trac.wordpress.org/browser/peprodev-ups/tags/7.5.2/login/login.php#L2810
• https://wordpress.org/plugins/peprodev-ups/#developers
• https://www.wordfence.com/threat-intel/vulnerabilities/id/7bb36c0f-68b3-492e-9f08-fe6228b0363f?source=cve

Published

May 7, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-39203A vulnerability exists in the IEC 61850 of the MicroSCADA X …7.1
• CVE-2025-39204A vulnerability exists in the Web interface of the MicroSCAD…8.5
• CVE-2025-39205A vulnerability exists in the IEC 61850 in MicroSCADA X SYS6…7.1
• CVE-2025-3921The PeproDev Ultimate Profile Solutions plugin for WordPress…8.2
• CVE-2025-3922GitLab has remediated an issue in GitLab CE/EE affecting all…6.5
• CVE-2025-3923The Prevent Direct Access – Protect WordPress Files plugin f…5.3
• CVE-2025-39240Some Hikvision Wireless Access Point are vulnerable to authe…7.2
• CVE-2025-39245There is a CSV Injection Vulnerability in some HikCentral Ma…4.7
• CVE-2025-39246There is an Unquoted Service Path Vulnerability in some HikC…5.3
• CVE-2025-39247There is an Access Control Vulnerability in some HikCentral …8.6
• CVE-2025-3925BrightSign players running BrightSign OS series 4 prior to v…8.5
• CVE-2025-3927Digigram's PYKO-OUT audio-over-IP (AoIP) web-server does not…9.8