Lucene search

PRIOn knowledge basePRION:CVE-2023-40600

HistoryNov 30, 2023 - 3:15 p.m.

Code injection

2023-11-3015:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

ewww image optimizer

version n/a - 7.2.0

sensitive information

unauthorized actors

code injection

debug.log

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.3%

JSON

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exactly WWW EWWW Image Optimizer. It works only when debug.log is turned on.This issue affects EWWW Image Optimizer: from n/a through 7.2.0.

CPENameOperatorVersion
image_optimizerlt7.2.1

CPE	Name	Operator	Version
	image_optimizer	lt	7.2.1

References

patchstack.com/database/vulnerability/ewww-image-optimizer/wordpress-ewww-image-optimizer-plugin-7-2-0-sensitive-data-exposure-vulnerability?_s_id=cve