Lucene search
PatchstackVULNRICHMENT:CVE-2024-23523HistoryMar 16, 2024 - 4:26 a.m.
CVE-2024-23523 WordPress Elementor Pro plugin <= 3.19.2 - Contributor+ Arbitrary User Meta Data Retrieval vulnerability
2024-03-1604:26:07
CWE-200
Patchstack
github.com
4
wordpress
elementor pro
vulnerability
arbitrary user meta data retrieval
sensitive information
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
7.1
Confidence
Low
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Elementor Pro.This issue affects Elementor Pro: from n/a through 3.19.2.
Related
nvd
nvd
CVE-2024-23523
2024-03-16 05:15:21
wpvulndb
wpvulndb
Elementor Pro < 3.19.3 - Authenticated (Contributor+) Information Exposure
2024-03-04 00:00:00
cvelist
cvelist
cve
cve
CVE-2024-23523
2024-03-16 05:15:21
wordfence
wordfence
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
7.1
Confidence
Low
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-23523