CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-2931

The WPFront User Role Editor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.1.11184 via the wpfront_user_role_editor_assign_roles_user_autocomplete AJAX action. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract retrieve a list of all user email addresses who are registered on the site.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 42.3%

CVSS Severity

CVSS v3 Score 4.3

References

Products affected by CVE-2024-2931

Wpfront » Wpfront User Role Editor » Version: 0.3

cpe:2.3:a:wpfront:wpfront_user_role_editor:0.3
Wpfront » Wpfront User Role Editor » Version: 0.3.1

cpe:2.3:a:wpfront:wpfront_user_role_editor:0.3.1
Wpfront » Wpfront User Role Editor » Version: 1.0

cpe:2.3:a:wpfront:wpfront_user_role_editor:1.0
Wpfront » Wpfront User Role Editor » Version: 1.1

cpe:2.3:a:wpfront:wpfront_user_role_editor:1.1
Wpfront » Wpfront User Role Editor » Version: 1.2

cpe:2.3:a:wpfront:wpfront_user_role_editor:1.2
Wpfront » Wpfront User Role Editor » Version: 2.0

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.0
Wpfront » Wpfront User Role Editor » Version: 2.1

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.1
Wpfront » Wpfront User Role Editor » Version: 2.10

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.10
Wpfront » Wpfront User Role Editor » Version: 2.10.1.3

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.10.1.3
Wpfront » Wpfront User Role Editor » Version: 2.11

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.11
Wpfront » Wpfront User Role Editor » Version: 2.11.1

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.11.1
Wpfront » Wpfront User Role Editor » Version: 2.11.2

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.11.2
Wpfront » Wpfront User Role Editor » Version: 2.11.3

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.11.3
Wpfront » Wpfront User Role Editor » Version: 2.12

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.12
Wpfront » Wpfront User Role Editor » Version: 2.12.1

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.12.1
Wpfront » Wpfront User Role Editor » Version: 2.12.2

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.12.2
Wpfront » Wpfront User Role Editor » Version: 2.12.3

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.12.3
Wpfront » Wpfront User Role Editor » Version: 2.12.4

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.12.4
Wpfront » Wpfront User Role Editor » Version: 2.12.5

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.12.5
Wpfront » Wpfront User Role Editor » Version: 2.13

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.13
Wpfront » Wpfront User Role Editor » Version: 2.13.1

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.13.1
Wpfront » Wpfront User Role Editor » Version: 2.14.1

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.14.1
Wpfront » Wpfront User Role Editor » Version: 2.14.2

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.14.2
Wpfront » Wpfront User Role Editor » Version: 2.14.3

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.14.3
Wpfront » Wpfront User Role Editor » Version: 2.14.4

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.14.4
Wpfront » Wpfront User Role Editor » Version: 2.2

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.2
Wpfront » Wpfront User Role Editor » Version: 2.2.1

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.2.1
Wpfront » Wpfront User Role Editor » Version: 2.3

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.3
Wpfront » Wpfront User Role Editor » Version: 2.4

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.4
Wpfront » Wpfront User Role Editor » Version: 2.5

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.5
Wpfront » Wpfront User Role Editor » Version: 2.5.1

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.5.1
Wpfront » Wpfront User Role Editor » Version: 2.6

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.6
Wpfront » Wpfront User Role Editor » Version: 2.6.1

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.6.1
Wpfront » Wpfront User Role Editor » Version: 2.6.2

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.6.2
Wpfront » Wpfront User Role Editor » Version: 2.7

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.7
Wpfront » Wpfront User Role Editor » Version: 2.8

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.8
Wpfront » Wpfront User Role Editor » Version: 2.9

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.9
Wpfront » Wpfront User Role Editor » Version: 2.9.1

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.9.1
Wpfront » Wpfront User Role Editor » Version: 2.9.3

cpe:2.3:a:wpfront:wpfront_user_role_editor:2.9.3
Wpfront » Wpfront User Role Editor » Version: 3.0.0

cpe:2.3:a:wpfront:wpfront_user_role_editor:3.0.0
Wpfront » Wpfront User Role Editor » Version: 3.1.0

cpe:2.3:a:wpfront:wpfront_user_role_editor:3.1.0
Wpfront » Wpfront User Role Editor » Version: 3.2.0

cpe:2.3:a:wpfront:wpfront_user_role_editor:3.2.0
Wpfront » Wpfront User Role Editor » Version: 3.2.1

cpe:2.3:a:wpfront:wpfront_user_role_editor:3.2.1
Wpfront » Wpfront User Role Editor » Version: 3.2.1.11184

cpe:2.3:a:wpfront:wpfront_user_role_editor:3.2.1.11184

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-2931

Products

Pricing

Contact Us