Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-7630

Опубликовано: 16 авг. 2024
Источник: nvd
CVSS3: 5.3
CVSS3: 7.5
EPSS Низкий

Описание

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.22.2 via the relevanssi_do_query() due to insufficient limitations on the posts that are returned when searching. This makes it possible for unauthenticated attackers to extract potentially sensitive information from password protected posts.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:relevanssi:relevanssi:*:*:*:*:*:wordpress:*:*
Версия до 4.23.0 (исключая)

EPSS

Процентиль: 81%
0.01595
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-200
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 5.3
github
больше 1 года назад

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.22.2 via the relevanssi_do_query() due to insufficient limitations on the posts that are returned when searching. This makes it possible for unauthenticated attackers to extract potentially sensitive information from password protected posts.

EPSS

Процентиль: 81%
0.01595
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-200
NVD-CWE-noinfo