CVE-2023-4645

CVE-2023-4645 affects the WordPress plugin Ad Inserter (up to version 2.7.30). The vulnerability arises in the ai_ajax function (and related ai-debug-processing-fe path) and allows unauthenticated attackers to exfiltrate sensitive data such as post titles and slugs (including protected posts with...

WordPress Ad Inserter Plugin <= 2.7.30 is vulnerable to Sensitive Data Exposure

Software Ad Inserter Type Plugin Vulnerable versions = 2.7.30 Fixed in 2.7.31 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-4645 Patch priority Low CVSS severity Low 5.3 Developer Igor Funa PSID d835574a9ec2 Credits Marco Wotschka Required privilege...