Lucene search

CVE-2023-44991 WordPress Media File Renamer Plugin <= 5.6.9 is vulnerable to Sensitive Data Exposure

🗓️ 19 Dec 2023 15:19:34Reported by PatchstackType

Vulnerability in WordPress Media File Renamer Plugi

Reporter	Title	Published	Views	Family All 6
CVE	CVE-2023-44991	19 Dec 202316:15	–	cve
Prion	Design/Logic Flaw	19 Dec 202316:15	–	prion
NVD	CVE-2023-44991	19 Dec 202316:15	–	nvd
WPVulnDB	Media File Renamer < 5.7.0 - Sensitive Information Exposure via Log File	7 Dec 202300:00	–	wpvulndb
Patchstack	WordPress Media File Renamer Plugin <= 5.6.9 is vulnerable to Sensitive Data Exposure	28 Nov 202300:00	–	patchstack
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (November 27, 2023 to December 3, 2023)	7 Dec 202314:11	–	wordfence

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "media-file-renamer",
    "product": "Media File Renamer: Rename Files (Manual, Auto & AI)",
    "vendor": "Jordy Meow",
    "versions": [
      {
        "changes": [
          {
            "at": "5.7.0",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "5.6.9",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/media-file-renamer/wordpress-media-file-renamer-plugin-5-6-9-sensitive-data-exposure-via-debug-log-vulnerability

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Dec 2023 15:34Current

7.7High risk

Vulners AI Score7.7

CVSS36.5

EPSS0.001

CWE-200