Lucene search

K
wpvulndbWpvulndbWPVDB-ID:59E0CE01-5EDA-4F52-AB95-CE35738F8B7E
HistoryNov 23, 2023 - 12:00 a.m.

WP Ultimate Exporter < 2.4.2 - Unauthenticated Information Disclosure

2023-11-2300:00:00
wpscan.com
16
wordpress
ultimate exporter
sensitive information exposure
directory
unauthenticated attackers
cve-2023-45066

0.001 Low

EPSS

Percentile

37.2%

Description The WP Ultimate Exporter plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.4.1 due to insufficient protection on the directory in which exported files are stored in. This can allow unauthenticated attackers to extract sensitive data from accessible log files which can contain information from posts, pages, users, comments, and more. CVE-2023-45066 appears to be a duplicate of this issue.

CPENameOperatorVersion
eq2.4.2

0.001 Low

EPSS

Percentile

37.2%

Related for WPVDB-ID:59E0CE01-5EDA-4F52-AB95-CE35738F8B7E