CVE-2023-5845

2023-11-2717:15:09

[email protected]

web.nvd.nist.gov

cve-2023-5845

simple social media share buttons

wordpress plugin

security vulnerability

password-protected post

meta tags

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.0005 Low

EPSS

Percentile

17.0%

JSON

The Simple Social Media Share Buttons WordPress plugin before 5.1.1 leaks password-protected post content to unauthenticated visitors in some meta tags

Affected configurations

Vulners

NVD

Node

wpbrigadesimple_social_media_share_buttonsRange<5.1.1

VendorProductVersionCPE
wpbrigadesimple_social_media_share_buttons*cpe:2.3:a:wpbrigade:simple_social_media_share_buttons:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wpbrigade	simple_social_media_share_buttons	*	cpe:2.3:a:wpbrigade:simple_social_media_share_buttons::::::::

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Simple Social Media Share Buttons",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "5.1.1"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]