exploitDog

CVE-2023-4668

Опубликовано: 20 окт. 2023

Источник: nvd

CVSS3: 5.3

CVSS3: 7.5

EPSS Низкий

Описание

The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the ai-debug-processing-fe URL parameter. This can allow unauthenticated attackers to extract sensitive data including installed plugins (present and active), active theme, various plugin settings, WordPress version, as well as some server settings such as memory limit, installation paths.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ad_inserter_project:ad_inserter:*:*:*:*:*:wordpress:*:*

Версия до 2.7.31 (исключая)

EPSS

Процентиль: 70%

0.00641

Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-862

Связанные уязвимости

GHSA-cpgw-pm36-mfq9

CVSS3: 5.3

github

больше 2 лет назад

The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the ai-debug-processing-fe URL parameter. This can allow unauthenticated attackers to extract sensitive data including installed plugins (present and active), active theme, various plugin settings, WordPress version, as well as some server settings such as memory limit, installation paths.

EPSS

Процентиль: 70%

0.00641

Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-862