Lucene search

PatchstackCVE-2024-38760

HistoryAug 13, 2024 - 11:15 a.m.

CVE-2024-38760

2024-08-1311:15:16

CWE-200

Patchstack

web.nvd.nist.gov

sensitive information

unauthorized access

vulnerability

david maucher

send users email

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

Percentile

9.5%

JSON

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in David Maucher Send Users Email allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Send Users Email: from n/a through 1.5.1.

Affected configurations

Vulners

Vulnrichment

Node

david_mauchersend_users_emailRange≤1.5.1

VendorProductVersionCPE
david_mauchersend_users_email*cpe:2.3:a:david_maucher:send_users_email:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
david_maucher	send_users_email	*	cpe:2.3:a:david_maucher:send_users_email::::::::

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "send-users-email",
    "product": "Send Users Email",
    "vendor": "David Maucher",
    "versions": [
      {
        "changes": [
          {
            "at": "1.5.2",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.5.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/send-users-email/wordpress-send-users-email-plugin-1-5-1-sensitive-data-exposure-vulnerability?_s_id=cve

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

Percentile

9.5%

JSON

Related for CVE-2024-38760