CVE-2023-2916: InfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information Exposure
The InfiniteWP Client plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.11.1 via the 'adminnotice' function. This can allow authenticated attackers with subscriber-level permissions or above to extract sensitive data including configuration. It can only be exploited if the plugin has not been configured yet. If combined with another arbitrary plugin installation and activation vulnerability, it may be possible to connect a site to InfiniteWP which would make remote management possible and allow for elevation of privileges.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-2916.
What is the severity of CVE-2023-2916?
The severity of CVE-2023-2916 is high with a severity value of 5.3.
Which software is affected by CVE-2023-2916?
The InfiniteWP Client plugin for WordPress versions up to, and including, 1.11.1 is affected by CVE-2023-2916.
How can a vulnerability in affected versions of the InfiniteWP Client plugin be exploited?
Authenticated attackers with subscriber-level permissions or above can exploit this vulnerability by using the 'admin_notice' function to extract sensitive data including configuration.
Are there any references for CVE-2023-2916?
Yes, here are some references for CVE-2023-2916: [Link 1](https://plugins.trac.wordpress.org/browser/iwp-client/tags/1.11.1/core.class.php#L365), [Link 2](https://plugins.trac.wordpress.org/changeset/2925897/iwp-client#file4), [Link 3](https://www.wordfence.com/threat-intel/vulnerabilities/id/aa157c80-447f-4406-9e49-9cc6208b7b19?source=cve).