WordPress User Profile Meta Manager plugin <= 1.02 - CSRF to Privilege Escalation vulnerability

The CSRF vulnerability in User Profile Meta Manager allows an attacker to execute arbitrary actions on behalf of an authenticated user. This could include modifying user profiles, changing settings, or performing other administrative tasks, depending on the plugin's functionality and user permissions. Successful exploitation could lead to unauthorized data modification, account compromise, and potentially complete control over the affected WordPress site. The CRITICAL CVSS score reflects the high likelihood of exploitation and significant impact.

WordPress sites utilizing the User Profile Meta Manager plugin, particularly those with users having elevated privileges (e.g., administrators, editors). Shared hosting environments are at increased risk, as vulnerabilities in plugins can impact multiple websites hosted on the same server.

• wordpress / composer / npm:

grep -r 'user_profile_meta' /var/www/html/wp-content/plugins/

• generic web:

curl -I https://your-wordpress-site.com/wp-admin/admin-post.php?action=user_profile_meta_update&... # Check for lack of CSRF tokens

1. 2025-05-19Disclosure

   disclosure

1. Reserviert2025-05-19
2. Veröffentlicht2025-05-19
3. Geändert2026-04-28
4. EPSS aktualisiert2026-03-23

The primary mitigation for CVE-2025-48340 is to immediately update the User Profile Meta Manager plugin to the latest available version. If upgrading is not feasible due to compatibility issues or breaking changes, consider temporarily disabling the plugin. Implementing strict Content Security Policy (CSP) headers can also help mitigate CSRF attacks by restricting the sources from which scripts can be executed. Regularly review user permissions and implement multi-factor authentication (MFA) to further reduce the risk of unauthorized access.