Lucene search

K
wpvulndbWpvulndbWPVDB-ID:71EDE4E7-07F1-4A78-93B5-4744CDA0A309
HistoryNov 23, 2023 - 12:00 a.m.

Email posts to subscribers <= 6.2 - Missing Authorization to Sensitive Information Exposure

2023-11-2300:00:00
wpscan.com
1
wordpress
email
subscriber
data
exposure
vulnerability
unauthorized access
capability check

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.3%

Description The Email posts to subscribers for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the elp_plugin_parse_request() function in versions up to, and including 6.2. This makes it possible for unauthenticated attackers to invoke additional functions and export the email addresses of subscribers.

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.3%

Related for WPVDB-ID:71EDE4E7-07F1-4A78-93B5-4744CDA0A309