Lucene search

K
cvelistPatchstackCVELIST:CVE-2023-46820
HistoryNov 30, 2023 - 2:38 p.m.

CVE-2023-46820 WordPress Image Regenerate & Select Crop Plugin <= 7.3.0 is vulnerable to Sensitive Data Exposure

2023-11-3014:38:26
CWE-200
Patchstack
www.cve.org
wordpress
image regenerate
select crop
plugin
vulnerability
sensitive data exposure
unauthorized actor

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.0005 Low

EPSS

Percentile

17.0%

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Iulia Cazan Image Regenerate & Select Crop.This issue affects Image Regenerate & Select Crop: from n/a through 7.3.0.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "image-regenerate-select-crop",
    "product": "Image Regenerate & Select Crop",
    "vendor": "Iulia Cazan",
    "versions": [
      {
        "changes": [
          {
            "at": "7.3.1",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "7.3.0",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.0005 Low

EPSS

Percentile

17.0%

Related for CVELIST:CVE-2023-46820