CyberRota Analysis
AI-GeneratedThe User Frontend plugin for WordPress is vulnerable to Insecure Direct Object Reference, allowing unauthenticated attackers to overwrite critical post attributes such as post_title, post_content, and post_excerpt on any post, including those created by administrators. This vulnerability arises from inadequate validation of the 'wpuf_files_data' parameter, enabling exploitation through any accessible WPUF post submission form. WordPress site administrators and those using this plugin should prioritize patching to mitigate the risk of unauthorized content manipulation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.7 via the 'wpuf_files_data' parameter due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to overwrite the post_title, post_content, and post_excerpt of any arbitrary post on the site, including posts authored by administrators. Exploitation requires access to any WPUF post submission form; this is achievable by users with no WordPress role, as the wpuf_submit_post AJAX action is gated only by a nonce with no capability check for the downstream post-edit operation.