CVE-2023-6289

CVE-2023-6289 Swift Performance Lite = 2.3.6.14 - 인증되지 않은 설정 내보내기를 허용하는 권한 누락 설명 Swift Performance Lite 플러그인은 WordPress에서 모든 버전최대 2.3.6.14 포함에서 admininit 함수를 통해 연결된 기능에 대한 기능 검사capability check가 누락되어 데이터에 대한 무단 접근에 취약합니다. 이로 인해 인증되지 않은 공격자가 Cloudflare API 토큰을 포함할 수 있는 플러그인 설정을 내보낼 수 있습니다. Severit...

CVE-2023-6289

The Swift Performance Lite WordPress plugin before 2.3.6.15 does not prevent users from exporting the plugin's settings, which may include sensitive information such as Cloudflare API tokens...

CVE-2023-6289

The Swift Performance Lite WordPress plugin before 2.3.6.15 does not prevent users from exporting the plugin's settings, which may include sensitive information such as Cloudflare API tokens...

Information disclosure

The Swift Performance Lite WordPress plugin before 2.3.6.15 does not prevent users from exporting the plugin's settings, which may include sensitive information such as Cloudflare API tokens...

CVE-2023-6289

CVE-2023-6289 affects the WordPress plugin Swift Performance Lite up to version 2.3.6.14. Root cause: missing authorization check on an admin-ajax exported function (luv-action export) via admin_init, allowing unauthenticated retrieval of plugin settings that may include Cloudflare API tokens. Im...

CVE-2023-6289: Undefined Security Weakness

The Swift Performance Lite WordPress plugin before 2.3.6.15 does not prevent users from exporting the plugin's settings, which may include sensitive information such as Cloudflare API tokens...

WordPress Plugin Swift Performance Lite Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...