CVE-2023-52126

2024-01-0512:15:11

CWE-200

[email protected]

web.nvd.nist.gov

cve-2023-52126

vulnerability

sensitive information

unauthorized actor

suman bhattarai

send users email

nvd

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Suman Bhattarai Send Users Email.This issue affects Send Users Email: from n/a through 1.4.3.

Affected configurations

Vulners

NVD

Node

suman_bhattaraisend_users_emailRange≤1.4.3

CPENameOperatorVersion
sumanbhattarai:send_users_emailsumanbhattarai send users emaille1.4.3

CPE	Name	Operator	Version
sumanbhattarai:send_users_email	sumanbhattarai send users email	le	1.4.3

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "send-users-email",
    "product": "Send Users Email",
    "vendor": "Suman Bhattarai",
    "versions": [
      {
        "changes": [
          {
            "at": "1.4.4",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.4.3",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]