CVE-2023-52190

Опубликовано: 08 янв. 2024

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WP Swings Coupon Referral Program.This issue affects Coupon Referral Program: from n/a through 1.7.2.

Ссылки

https://patchstack.com/database/vulnerability/coupon-referral-program/wordpress-coupon-referral-program-plugin-1-7-2-unauthenticated-sensitive-data-pii-coupon-data-exposure-vulnerability?_s_id=cve
Third Party Advisory
https://patchstack.com/database/vulnerability/coupon-referral-program/wordpress-coupon-referral-program-plugin-1-7-2-unauthenticated-sensitive-data-pii-coupon-data-exposure-vulnerability?_s_id=cve
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wpswings:coupon_referral_program:*:*:*:*:*:wordpress:*:*

Версия до 1.7.2 (включая)

EPSS

Процентиль: 69%

0.00618

Низкий

7.5 High

CVSS3

Дефекты

CWE-200

NVD-CWE-noinfo

Связанные уязвимости

GHSA-5g4j-2gfr-rxr3