CVE-2023-1431

The WP Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.6.3 due to the plugin saving shopping cart data exports in a publicly accessible location /wp-content/plugins/wordpress-simple-paypal-shopping-cart/includes/admin/...

WordPress Simple Shopping Cart Plugin <= 4.6.3 is vulnerable to Sensitive Data Exposure

Software Simple Shopping Cart Type Plugin Vulnerable versions = 4.6.3 Fixed in 4.6.4 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-1431 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 471aef51a29f Credits Ayoub Safa Required...