Lucene search
PatchstackCVELIST:CVE-2023-49822HistoryJun 04, 2024 - 11:24 a.m.
CVE-2023-49822 WordPress Ultimate Dashboard plugin <= 3.7.10 - Secret Login Page Location Disclosure on Multisites vulnerability
2024-06-0411:24:43
CWE-200
Patchstack
www.cve.org
6
wordpress
ultimate dashboard
secret login page
disclosure
vulnerability
multisites
sensitive information
unauthorized actor
acls
CVSS3
3.7
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
4.2
Confidence
High
EPSS
0
Percentile
9.0%
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in David Vongries Ultimate Dashboard allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Ultimate Dashboard: from n/a through 3.7.10.
CNA Affected
[
{
"collectionURL": "https://wordpress.org/plugins",
"defaultStatus": "unaffected",
"packageName": "ultimate-dashboard",
"product": "Ultimate Dashboard",
"vendor": "David Vongries",
"versions": [
{
"changes": [
{
"at": "3.7.11",
"status": "unaffected"
}
],
"lessThanOrEqual": "3.7.10",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2023-49822
2024-06-04 12:15:09
wpvulndb
wpvulndb
Ultimate Dashboard < 3.7.11 - Login Page Disclosure on Multi-site
2023-12-12 00:00:00
nvd
nvd
CVE-2023-49822
2024-06-04 12:15:09
vulnrichment
vulnrichment
wordfence
wordfence
CVSS3
3.7
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
4.2
Confidence
High
EPSS
0
Percentile
9.0%
Related for CVELIST:CVE-2023-49822