CVE-2023-6695

The Beaver Themer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.9 via the 'wpbb' shortcode. This makes it possible for authenticated attackers, with contributor access and above, to extract sensitive data including arbitrary usermet...

CVE-2023-6695

Beaver Themer (WordPress) is associated with CVE-2023-6695 describing Sensitive Information Exposure via the wpbb shortcode in all versions up to and including 1.4.9. The vulnerability allows authenticated attackers withContributor+ access to extract sensitive data, including arbitrary user_meta ...

CVE-2023-6695 Beaver Themer <= 1.4.9 - Authenticated (Contributor+) Sensitive Information Exposure via shortcode

The Beaver Themer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.9 via the 'wpbb' shortcode. This makes it possible for authenticated attackers, with contributor access and above, to extract sensitive data including arbitrary usermet...

WordPress Beaver Themer Plugin <= 1.4.9 is vulnerable to Sensitive Data Exposure

Software Beaver Themer Type Plugin Vulnerable versions = 1.4.9 Fixed in 1.4.9.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-6695 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 46037e2368f0 Credits Francesco Carlucci Require...