Lucene search
WpvulndbWPVDB-ID:2C3C8660-514D-4B7F-83AE-B4A16241893EHistoryApr 17, 2024 - 12:00 a.m.
WP Meta SEO < 4.5.13 - Unauthenticated Password Protected Content Access
2024-04-1700:00:00
wpscan.com
5
plugin
vulnerability
sensitive information
exposure
meta description
unauthenticated
attackers
disclose
password-protected posts
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
6.3
Confidence
High
EPSS
0.001
Percentile
17.0%
Description The plugin is vulnerable to Sensitive Information Exposure via the meta description, allowing unauthenticated attackers to disclose potentially sensitive information via the meta description of password-protected posts.
Related
cve
cve
CVE-2023-6962
2024-05-02 17:15:08
cvelist
cvelist
CVE-2023-6962
2024-05-02 16:51:41
vulnrichment
vulnrichment
CVE-2023-6962
2024-05-02 16:51:41
nvd
nvd
CVE-2023-6962
2024-05-02 17:15:08
wordfence
wordfence
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
6.3
Confidence
High
EPSS
0.001
Percentile
17.0%
Related for WPVDB-ID:2C3C8660-514D-4B7F-83AE-B4A16241893E