Lucene search

WordfenceCVE-2023-6583

HistoryJan 11, 2024 - 9:15 a.m.

CVE-2023-6583

2024-01-1109:15:49

CWE-22

Wordfence

web.nvd.nist.gov

cve-2023-6583

wordpress

vulnerability

directory traversal

plugin

security

nvd

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

21.6%

JSON

The Import and export users and customers plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.24.2 via the Recurring Import functionality. This makes it possible for authenticated attackers, with administrator access and above, to read and delete the contents of arbitrary files on the server including wp-config.php, which can contain sensitive information.

Affected configurations

Nvd

Vulners

Node

codectionimport_and_export_users_and_customersRange≤1.24.2wordpress

VendorProductVersionCPE
codectionimport_and_export_users_and_customers*cpe:2.3:a:codection:import_and_export_users_and_customers:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
codection	import_and_export_users_and_customers	*	cpe:2.3:a:codection:import_and_export_users_and_customers::::::wordpress::*

CNA Affected

[
  {
    "vendor": "carazo",
    "product": "Import and export users and customers",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.24.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

plugins.trac.wordpress.org/changeset/3007057/

www.wordfence.com/threat-intel/vulnerabilities/id/ac709779-36f1-4f66-8db3-95a514a5ea59?source=cve

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

21.6%

JSON

Related for CVE-2023-6583