CVE-2024-6410

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.8.9 via the 'pm_upload_image' function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change the profile picture of any user.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-639

Affected software

Vendor	Product	Versions
metagauss	ProfileGrid – User Profiles, Groups and Communities	<= 5.8.9
metagauss	profilegrid	<= 5.8.9

References

Timeline

Published: Jul 10, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-64118.8The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to privilege escalation in all versions up to, an CVE-2024-64126.5The HTML Forms WordPress plugin before 1.3.34 does not have CSRF checks in some places, which could allow attackers to make logged in users CVE-2024-64145.3A vulnerability classified as problematic has been found in Parsec Automation TrakSYS 11.x.x. Affected is an unknown function of the file TS CVE-2024-64152.4A vulnerability classified as problematic was found in Ingenico Estate Manager 2023. Affected by this vulnerability is an unknown functional CVE-2024-64169.8A vulnerability was found in SeaCMS 12.9. It has been declared as critical. Affected by this vulnerability is an unknown functionality of th CVE-2024-64177.5A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been rated as critical. Affected by this issue is some CVE-2024-64185.3A vulnerability classified as critical has been found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the fil CVE-2024-64199.8A vulnerability classified as critical was found in SourceCodester Medicine Tracker System 1.0. This vulnerability affects unknown code of t CVE-2024-64208.6The Hide My WP Ghost WordPress plugin before 5.2.02 does not prevent redirects to the login page via the auth_redirect WordPress function, a CVE-2024-64217.5An unauthenticated remote attacker can read out sensitive device information through a incorrectly configured FTP service.CVE-2024-64229.8An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data.CVE-2024-64234.0The product failed to enforce validation constraints on user-supplied input in URL parameters, allowing sensitive data to be passed to flows