Lucene search

K
cvelistPatchstackCVELIST:CVE-2023-36507
HistoryNov 30, 2023 - 3:26 p.m.

CVE-2023-36507 WordPress BookingPress Plugin <= 1.0.64 is vulnerable to Sensitive Data Exposure

2023-11-3015:26:47
CWE-200
Patchstack
www.cve.org
cve-2023-36507
sensitive data exposure
repute infosystems
appointment booking calendar
online scheduling

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.0005 Low

EPSS

Percentile

17.1%

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Repute Infosystems BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin.This issue affects BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin: from n/a through 1.0.64.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "bookingpress-appointment-booking",
    "product": "BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin",
    "vendor": "Repute Infosystems",
    "versions": [
      {
        "changes": [
          {
            "at": "1.0.65",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.0.64",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.0005 Low

EPSS

Percentile

17.1%

Related for CVELIST:CVE-2023-36507