Lucene search
PRIOn knowledge basePRION:CVE-2023-1431HistoryMar 16, 2023 - 1:15 p.m.
Code injection
2023-03-1613:15:00
PRIOn knowledge base
www.prio-n.com
3
wordpress
simple shopping cart
vulnerable
sensitive information exposure
data exports
publicly accessible location
unauthenticated attackers
administrators
first name
last name
email
address
ip address.
The WP Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.6.3 due to the plugin saving shopping cart data exports in a publicly accessible location (/wp-content/plugins/wordpress-simple-paypal-shopping-cart/includes/admin/). This makes it possible for unauthenticated attackers to view information that should be limited to administrators only and can include data like first name, last name, email, address, IP Address, and more.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress_simple_paypal_shopping_cart | le | 4.6.3 |
References
Related
cve
cve
CVE-2023-1431
2023-03-16 13:15:10
nvd
nvd
CVE-2023-1431
2023-03-16 13:15:10
wpvulndb
wpvulndb
WP Simple Shopping Cart 4.6.3 - Unauthenticated PII Disclosure
2023-03-16 00:00:00
cvelist
cvelist
CVE-2023-1431
2023-03-16 12:36:27
wordfence
wordfence