CVE-2023-6444 Vulnerability Details

  /     /     /  

CVE-2023-6444 Metadata Quick Info

CVE Published: 11/03/2024 | CVE Updated: 05/08/2024 | CVE Year: 2023
Source: WPScan | Vendor: Unknown | Product: Seriously Simple Podcasting
Status : PUBLISHED

---

CVE-2023-6444 Description

The Seriously Simple Podcasting WordPress plugin before 3.0.0 discloses the Podcast owner\'s email address (which by default is the admin email address) via an unauthenticated crafted request.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: CWE-201 Insertion of Sensitive Information Into Sent Data
Source: Unknown

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).