Lucene search

WpvulndbWPVDB-ID:A11B9635-00C0-4E39-B495-01CA922B9317

HistoryMay 16, 2024 - 12:00 a.m.

Barcode Scanner with Inventory & Order Manager < 1.5.5 - Unauthenticated Information Exposure

2024-05-1600:00:00

wpscan.com

barcode scanner

inventory manager

unauthenticated attackers

sensitive information exposure

exported files

configuration data

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

JSON

Description The Barcode Scanner and Inventory manager. POS (Point of Sale) – scan barcodes & create orders with barcode reader. plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.5.4 via exported files. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data.

CPENameOperatorVersion
eq1.5.5

CPE	Name	Operator	Version
		eq	1.5.5

References

www.wordfence.com/threat-intel/vulnerabilities/id/177929c5-d32f-4f0a-afc1-6d4a7091dfd5

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

JSON

Related for WPVDB-ID:A11B9635-00C0-4E39-B495-01CA922B9317