Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-43504
HistoryDec 05, 2022 - 12:00 a.m.

CVE-2022-43504

2022-12-0500:00:00
ubuntu.com
ubuntu.com
17
wordpress
authentication
vulnerability
remote attacker
email address

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.002 Low

EPSS

Percentile

56.6%

Improper authentication vulnerability in WordPress versions prior to 6.0.3
allows a remote unauthenticated attacker to obtain the email address of the
user who posted a blog using the WordPress Post by Email Feature. The
developer also provides new patched releases for all versions since 3.7.

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.002 Low

EPSS

Percentile

56.6%