Lucene search
K

5 matches found

OSV
OSV
added 2024/04/09 10:59 a.m.26 views

BIT-WORDPRESS-2023-5692 WordPress Core <= 6.4.3 - Sensitive Information Exposure via redirect_guess_404_permalink

WordPress Core is vulnerable to Sensitive Information Exposure in versions up to, and including, 6.4.3 via the redirectguess404permalink function. This can allow unauthenticated attackers to expose the slug of a custom post whose 'publiclyqueryable' post status has been set to 'false'...

5.3CVSS6.7AI score0.01055EPSS
Exploits0References6
NVD
NVD
added 2024/04/05 1:15 p.m.10 views

CVE-2023-5692

WordPress Core is vulnerable to Sensitive Information Exposure in versions up to, and including, 6.4.3 via the redirectguess404permalink function. This can allow unauthenticated attackers to expose the slug of a custom post whose 'publiclyqueryable' post status has been set to 'false'...

5.3CVSS5.2AI score0.01055EPSS
Exploits0References5
CVE
CVE
added 2024/04/05 12:52 p.m.186 views

CVE-2023-5692

CVE-2023-5692 affects WordPress Core and is exploitable through the redirect_guess_404_permalink function in versions up to and including 6.4.3. The issue allows unauthenticated attackers to reveal the slug of a custom post whose publicly_queryable status is false, constituting a sensitive inform...

5.3CVSS5.5AI score0.01055EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2024/04/05 12:52 p.m.13 views

CVE-2023-5692

WordPress Core is vulnerable to Sensitive Information Exposure in versions up to, and including, 6.4.3 via the redirectguess404permalink function. This can allow unauthenticated attackers to expose the slug of a custom post whose 'publiclyqueryable' post status has been set to 'false'...

5.3CVSS7.2AI score0.01055EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2024/04/05 12:52 p.m.16 views

CVE-2023-5692 WordPress Core <= 6.4.3 - Sensitive Information Exposure via redirect_guess_404_permalink

WordPress Core is vulnerable to Sensitive Information Exposure in versions up to, and including, 6.4.3 via the redirectguess404permalink function. This can allow unauthenticated attackers to expose the slug of a custom post whose 'publiclyqueryable' post status has been set to 'false'...

5.3CVSS6.5AI score0.01055EPSS
Exploits0References5
Rows per page
Query Builder