Lucene search
HistoryDec 18, 2023 - 8:15 p.m.
CVE-2023-6289
wordpress plugin
swift performance
cloudflare api tokens
settings export
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0
Percentile
14.0%
The Swift Performance Lite WordPress plugin before 2.3.6.15 does not prevent users from exporting the plugin’s settings, which may include sensitive information such as Cloudflare API tokens.
Affected configurations
Node
swtepluginsswift_performanceRange<2.3.6.15litewordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| swteplugins | swift_performance | * | cpe:2.3:a:swteplugins:swift_performance:*:*:*:*:lite:wordpress:*:* |
Related
cvelist
cvelist
wpexploit
wpexploit
Swift Performance Lite <= 2.3.6.14 - Unauthenticated Configuration Export
2023-11-27 00:00:00
wpvulndb
wpvulndb
Swift Performance Lite <= 2.3.6.14 - Unauthenticated Configuration Export
2023-11-27 00:00:00
prion
prion
Information disclosure
2023-12-18 20:15:00
cve
cve
CVE-2023-6289
2023-12-18 20:15:08
wordfence
wordfence
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0
Percentile
14.0%
Related for NVD:CVE-2023-6289