CVE-2023-4139 in WP Ultimate CSV Importer Plugininfo

Zusammenfassung

von MITRE • 04.08.2023

The WP Ultimate CSV Importer plugin for WordPress is vulnerable to Sensitive Information Exposure via Directory Listing due to missing restriction in export folder indexing in versions up to, and including, 7.9.8. This makes it possible for unauthenticated attackers to list and view exported files.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

Wordfence

Reservieren

03.08.2023

Veröffentlichung

04.08.2023

Moderieren

akzeptiert

Eintrag

VDB-236063

CPE

bereit

EPSS

0.00570

KEV

nein

Aktivitäten

very low

Sektor

Hostingprovider

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2023-4139
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2023-4139
CVE Detailshttps://www.cvedetails.com/cve/CVE-2023-4139/

◂ ZurückÜbersichtWeiter ▸

Do you need the next level of professionalism?

Upgrade your account now!