The Simple Author Box WordPress plugin before 2.52 does not verify a user ID before outputting information about that user, leading to arbitrary user information disclosure to users with a role as low as Contributor.
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/c0cc513e-c306-4920-9afb-e33d95a7292f | Exploit Third Party Advisory |
| https://wpscan.com/vulnerability/c0cc513e-c306-4920-9afb-e33d95a7292f | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 08:17
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://wpscan.com/vulnerability/c0cc513e-c306-4920-9afb-e33d95a7292f - Exploit, Third Party Advisory |
21 Aug 2023, 16:05
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://wpscan.com/vulnerability/c0cc513e-c306-4920-9afb-e33d95a7292f - Exploit, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
| CPE | cpe:2.3:a:webfactoryltd:simple_author_box:*:*:*:*:*:wordpress:*:* |
14 Aug 2023, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-14 20:15
Updated : 2025-05-05 16:15
NVD link : CVE-2023-3601
Mitre link : CVE-2023-3601
CVE.ORG link : CVE-2023-3601
JSON object : View
Products Affected
webfactoryltd
- simple_author_box
CWE
No CWE.