CVE-2023-23978

Summary: CVE-2023-23978 affects the WordPress plugin “SwitchWP WP Client Reports” (WP Client Reports) and its vulnerable line is versions ≤ 1.0.16. The vulnerability is described as an exposure of sensitive information to an unauthorized actor. The Patchstack entry confirms a fix in version 1.0.1...

WordPress WP Client Reports Plugin <= 1.0.16 is vulnerable to Sensitive Data Exposure

Software WP Client Reports Type Plugin Vulnerable versions = 1.0.16 Fixed in 1.0.17 OWASP Top 10 A5: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2023-23978 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1a6f275a92fe Credits Rafshanzani Suhada...