CVE-2023-4469 | BDVDB-2026-213397 Detail

Description#

The Profile Extra Fields by BestWebSoft plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the prflxtrflds_export_file function in versions up to, and including, 1.2.7. This makes it possible for unauthenticated attackers to expose potentially sensitive user data, including data entered into custom fields.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-10-06Record published in the CVE List.
2. Version 22026-04-08Most recent update recorded in the CVE List.