CVE-2023-6444 Seriously Simple Podcasting < 3.0.0 - Unauthenticated Administrator Email Disclosure

2024-03-1117:56:04

WPScan

github.com

wordpress plugin

unauthenticated

email disclosure

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

22.6%

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

partial

JSON

The Seriously Simple Podcasting WordPress plugin before 3.0.0 discloses the Podcast owner’s email address (which by default is the admin email address) via an unauthenticated crafted request.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:castos:seriously_simple_podcasting:*:*:*:*:*:wordpress:*:*"
    ],
    "vendor": "castos",
    "product": "seriously_simple_podcasting",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "3.0.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]