5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.0005 Low
EPSS
Percentile
17.1%
The SEO SIMPLE PACK plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.2.1 via META description. This makes it possible for unauthenticated attackers to extract limited information about password protected posts.
[
{
"vendor": "looswebstudio",
"product": "SEO SIMPLE PACK",
"versions": [
{
"version": "*",
"status": "affected",
"lessThanOrEqual": "3.2.1",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
]