Lucene search
WpvulndbWPVDB-ID:031DA4A6-B196-4221-992E-DE96EAF915B0HistoryOct 12, 2023 - 12:00 a.m.
Profile Extra Fields by BestWebSoft < 1.2.8 - Unauthenticated Sensitive Data Disclosure
2023-10-1200:00:00
wpscan.com
3
profile extra fields
unauthenticated access
sensitive data disclosure
Description The plugin does not have authorisation in the prflxtrflds_export_file() function, allowing unauthenticated users to retrieve sensitive data such as the ones entered in custom fields
Related
nvd
nvd
CVE-2023-4469
2023-10-06 10:15:18
cve
cve
CVE-2023-4469
2023-10-06 10:15:18
prion
prion
Design/Logic Flaw
2023-10-06 10:15:00
cvelist
cvelist
CVE-2023-4469
2023-10-06 09:31:01
wordfence
wordfence
AI Score
6.9
Confidence
High
EPSS
0.001
Percentile
24.2%
Related for WPVDB-ID:031DA4A6-B196-4221-992E-DE96EAF915B0