Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-70765
HistoryMar 30, 2022 - 12:00 a.m.

WordPress Amelia plugin information leakage vulnerability

2022-03-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.001 Low

EPSS

Percentile

25.0%

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Amelia plugin versions prior to 1.0.47 contain an information disclosure vulnerability that stems from a failure to properly authorize appointments when managing them, which could be exploited by an attacker to vulnerability allows any customer to update someone else’s booking, as well as retrieve sensitive information about the booking, such as the full name and phone number of the person making the booking.

CPENameOperatorVersion
wordpress amelia pluginlt1.0.47

0.001 Low

EPSS

Percentile

25.0%