CVE-2023-5710

The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sdconstants function hooked via an AJAX action in all versions up to, and including, 2.8.7. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2023-5710

CVE-2023-5710 affects the WordPress System Dashboard plugin up to version 2.8.7, where a missing capability check in the sd_constants() function exposed data via an AJAX action. This allows authenticated users with subscriber-level access or higher to retrieve sensitive information, including dat...