Beveiligingsadvies

CVE-2023-4242

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-08-09 03:36:14

Laatst bijgewerkt 2026-04-08 17:13:39

Toegewezen door Wordfence

CVSS-score 4.3

Status PUBLISHED

Beschrijving

The FULL - Customer plugin for WordPress is vulnerable to Information Disclosure via the /health REST route in versions up to, and including, 2.2.3 due to improper authorization. This allows authenticated attackers with subscriber-level permissions and above to obtain sensitive information about the site configuration as disclosed by the WordPress health check.

← Alle CVE's bekijken Bekijk op cve.org ↗