The WP-Members Membership Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.8 via the wpmem_field shortcode. This makes it possible for authenticated attackers, with contributor access and above, to extract sensitive data including user emails, password hashes, usernames, and more.
References
Configurations
History
21 Nov 2024, 08:44
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3015224%40wp-members%2Ftrunk&old=2920897%40wp-members%2Ftrunk&sfp_email=&sfph_mail= - Patch | |
| References | () https://www.wordfence.com/threat-intel/vulnerabilities/id/46c61f38-553e-43b2-a666-b160db40e66d?source=cve - Third Party Advisory |
28 Oct 2024, 11:41
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Butlerblog
Butlerblog wp-members |
|
| CPE | cpe:2.3:a:butlerblog:wp-members:*:*:*:*:*:wordpress:*:* |
10 Jan 2024, 16:53
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:wp-members_project:wp-members:*:*:*:*:*:wordpress:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| First Time |
Wp-members Project
Wp-members Project wp-members |
|
| CWE | CWE-862 | |
| References | () https://www.wordfence.com/threat-intel/vulnerabilities/id/46c61f38-553e-43b2-a666-b160db40e66d?source=cve - Third Party Advisory | |
| References | () https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3015224%40wp-members%2Ftrunk&old=2920897%40wp-members%2Ftrunk&sfp_email=&sfph_mail= - Patch |
04 Jan 2024, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-04 04:15
Updated : 2024-11-21 08:44
NVD link : CVE-2023-6733
Mitre link : CVE-2023-6733
CVE.ORG link : CVE-2023-6733
JSON object : View
Products Affected
butlerblog
- wp-members
CWE
CWE-862
Missing Authorization