Lucene search

K
patchstackStealthcopterPATCHSTACK:21E317FD6F63BFAFDDD9107BA6CB4733
HistoryJul 16, 2024 - 12:00 a.m.

WordPress AForms Plugin <= 2.2.6 is vulnerable to Sensitive Data Exposure

2024-07-1600:00:00
stealthcopter
patchstack.com
wordpress
aforms
plugin
vulnerable
version 2.2.6
fixed 2.2.7
sensitive data exposure
owasp top 10
cve-2024-6565
low priority
low severity
unauthenticated
published 16 july 2024

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

6.6

Confidence

High

Software

AForms

Type

Plugin

Vulnerable versions

<= 2.2.6

Fixed in

2.2.7

OWASP Top 10

A3: Sensitive Data Exposure

Classification

Sensitive Data Exposure

CVE

CVE-2024-6565

Patch priority

Low

CVSS severity

Low (5.3)

Developer

Claim ownership

PSID

25ef6cfd65dd

Credits

stealthcopter

Required privilege

Unauthenticated

Published

16 July, 2024

Vulnerability details

Remove and replace plugin Expand full details Have additional information or questions about this entry? Let us know.

Solution

This security issue has a low severity impact and is unlikely to be exploited.

Affected configurations

Vulners
Node
vivid_colors\,_inc.aformsRange2.2.6
VendorProductVersionCPE
vivid_colors\,_inc.aforms*cpe:2.3:a:vivid_colors\,_inc.:aforms:*:*:*:*:*:*:*:*

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

6.6

Confidence

High

Related for PATCHSTACK:21E317FD6F63BFAFDDD9107BA6CB4733