Описание
Unauthenticated Sensitive Information Disclosure vulnerability in WP Libre Form 2 plugin <= 2.0.8 at WordPress allows attackers to list and delete submissions. Affects only versions from 2.0.0 to 2.0.8.
Ссылки
- PatchThird Party Advisory
- Third Party Advisory
- PatchThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 2.0.0 (включая) до 2.0.8 (включая)
cpe:2.3:a:wp_libre_form_project:wp_libre_form:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 40%
0.00185
Низкий
7.3 High
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-200
CWE-668
Связанные уязвимости
CVSS3: 6.5
github
почти 3 года назад
Unauthenticated Sensitive Information Disclosure vulnerability
EPSS
Процентиль: 40%
0.00185
Низкий
7.3 High
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-200
CWE-668