Lucene search
+L

2 matches found

OSV
OSV
added 2023/11/30 3:0 p.m.42 views

CVE-2023-40600 WordPress EWWW Image Optimizer Plugin <= 7.2.0 is vulnerable to Sensitive Data Exposure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exactly WWW EWWW Image Optimizer. It works only when debug.log is turned on.This issue affects EWWW Image Optimizer: from n/a through 7.2.0...

5.3CVSS7.1AI score
SaveExploits0References4
CVE
CVE
added 2023/11/30 3:0 p.m.123 views

CVE-2023-40600

Affected software: WordPress EWWW Image Optimizer plugin ≤ 7.2.0. Vulnerability: Sensitive information exposure via the debug_log function, allowing unauthenticated access to sensitive debug data when debug logging is enabled. Root cause/vector: debug_log writes internal data to logs accessible t...

7.5CVSS7.8AI score0.02036EPSS
SaveIn wildExploits1References1Affected Software1
Rows per page
Query Builder