CVE-2023-0940: metagauss profilegrid Incorrect Authorization
Vulnerability summary
CVE-2023-0940 is a high (CVSS 8.8) Incorrect Authorization vulnerability in metagauss profilegrid. EPSS estimates a 0.82% chance of exploitation in the next 30 days, higher than 56.8% of scored vulnerabilities. 1 public exploit is recorded. Fixed in 5.3.1.
Timeline
- 20-03-2023PublishedVulnerability first disclosed.
- 26-02-2025Last modifiedVulnerability information updated.
Description
The ProfileGrid WordPress plugin before 5.3.1 provides an AJAX endpoint for resetting a user password but does not implement proper authorization. This allows a user with low privileges, such as subscriber, to change the password of any account, including Administrator ones.
CVSS metrics
3 scores · 3 sources · 1 version- NVDNIST8.8HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- wordfenceSource8.8HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.82%
Chance of exploitation in the next 30 days
Percentile
57%
Versus all other CVEs
30-day change
0.00 pp
From 0.82% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (wpscan.com)
Maturity: unknown
Weaknesses
CWE · root cause- CWE-863Incorrect AuthorizationThe product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
- CWE-862Missing AuthorizationThe product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Affected systems
Metagauss1 product
- profilegrid< 5.3.1
Unknown1 product
- profilegrid< 5.3.1
Wordpress1 product
- profilegrid-user-profiles-groups-and-communities≤ 5.3.0 (fixed in 5.3.1)
3 vendors · 3 products
References
2 links- wpscan.com/vulnerability/56744f72-2d48-4f42-8195-24b4dd951bb5ExploitVDB EntryTechnical DescriptionThird Party Advisory