Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-06543
HistoryFeb 16, 2022 - 12:00 a.m.

WordPress Futurio Extra plugin information leakage vulnerability

2022-02-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
18

0.001 Low

EPSS

Percentile

24.8%

WordPress is a set of blogging platforms developed by the WordPress (Wordpress) Foundation using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. An information disclosure vulnerability exists in versions of WordPress Futurio Extra plugin prior to 1.6.3, which stems from a lack of valid restrictions on the plugin. Any login attacker can exploit this vulnerability to extract the email address of any other user.

CPENameOperatorVersion
wordpress futurio extra pluginlt1.6.3

0.001 Low

EPSS

Percentile

24.8%