Lucene search
HistoryDec 18, 2023 - 8:15 p.m.
CVE-2023-6203
wordpress
events calendar
disclosure
password protection
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
37.3%
The Events Calendar WordPress plugin before 6.2.8.1 discloses the content of password protected posts to unauthenticated users via a crafted request
Affected configurations
Node
trithe_events_calendarRange<6.2.8.1wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| tri | the_events_calendar | * | cpe:2.3:a:tri:the_events_calendar:*:*:*:*:*:wordpress:*:* |
Related
prion
prion
Cross site request forgery (csrf)
2023-12-18 20:15:00
openvas
openvas
cvelist
cvelist
wpvulndb
wpvulndb
cve
cve
CVE-2023-6203
2023-12-18 20:15:08
wpexploit
wpexploit
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
37.3%
Related for NVD:CVE-2023-6203