CVE-2023-39999: WordPress < 6.3.2 is vulnerable to Broken Access Control
Exposure of Sensitive Information to an Unauthorized Actor in WordPress from 6.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.13, from 6.0 through 6.0.5, from 5.9 through 5.9.7, from 5.8 through 5.8.7, from 5.7 through 5.7.9, from 5.6 through 5.6.11, from 5.5 through 5.5.12, from 5.4 through 5.4.13, from 5.3 through 5.3.15, from 5.2 through 5.2.18, from 5.1 through 5.1.16, from 5.0 through 5.0.19, from 4.9 through 4.9.23, from 4.8 through 4.8.22, from 4.7 through 4.7.26, from 4.6 through 4.6.26, from 4.5 through 4.5.29, from 4.4 through 4.4.30, from 4.3 through 4.3.31, from 4.2 through 4.2.35, from 4.1 through 4.1.38.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2023-39999?
CVE-2023-39999 is a vulnerability in WordPress that allows exposure of sensitive information to an unauthorized actor.
What is the severity of CVE-2023-39999?
The severity of CVE-2023-39999 is medium, with a CVSS score of 4.3.
How does CVE-2023-39999 affect WordPress?
CVE-2023-39999 affects WordPress versions 6.3 through 6.3.1, as well as several other versions listed in the vulnerability description.
What is the fix for CVE-2023-39999?
To fix CVE-2023-39999, users should update their WordPress installation to version 6.3.2 or higher.
Where can I find more information about CVE-2023-39999?
More information about CVE-2023-39999 can be found in the references provided: [reference 1](https://patchstack.com/articles/wordpress-core-6-3-2-security-update-technical-advisory?_s_id=cve), [reference 2](https://patchstack.com/database/vulnerability/wordpress/wordpress-wordpress-core-core-6-3-2-contributor-comment-read-on-private-and-password-protected-post-vulnerability?_s_id=cve).