Lucene search
WpvulndbWPVDB-ID:C0975E82-DDB5-4AA7-BDB8-F08A6A3D7648HistoryFeb 28, 2024 - 12:00 a.m.
Tainacan < 0.20.7 - Unauthenticated Sensitive Information Exposure
2024-02-2800:00:00
wpscan.com
4
tainacan
wordpress
sensitive information exposure
unauthenticated attackers
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
5.2
Confidence
High
EPSS
0
Percentile
9.0%
Description The Tainacan plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.20.6. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data.
Related
cve
cve
CVE-2024-1435
2024-02-29 05:15:09
nvd
nvd
CVE-2024-1435
2024-02-29 05:15:09
cvelist
cvelist
prion
prion
Code injection
2024-02-29 05:15:00
vulnrichment
vulnrichment
wordfence
wordfence
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
5.2
Confidence
High
EPSS
0
Percentile
9.0%
Related for WPVDB-ID:C0975E82-DDB5-4AA7-BDB8-F08A6A3D7648