CVE-2023-40600: WordPress EWWW Image Optimizer Plugin <= 7.2.0 is vulnerable to Sensitive Data Exposure
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exactly WWW EWWW Image Optimizer. It works only when debug.log is turned on.This issue affects EWWW Image Optimizer: from n/a through 7.2.0.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the vulnerability ID for the WordPress EWWW Image Optimizer Plugin?
The vulnerability ID for the WordPress EWWW Image Optimizer Plugin is CVE-2023-40600.
What is the severity of the CVE-2023-40600 vulnerability?
The severity of the CVE-2023-40600 vulnerability is high with a severity value of 7.5.
What is the affected software for the CVE-2023-40600 vulnerability?
The affected software for the CVE-2023-40600 vulnerability is EWWW Image Optimizer version up to 7.2.0.
How does the CVE-2023-40600 vulnerability work?
The CVE-2023-40600 vulnerability exposes sensitive information to an unauthorized actor when debug.log is turned on.
Is there a patch available for the CVE-2023-40600 vulnerability?
Yes, a patch is available. More information can be found at https://patchstack.com/database/vulnerability/ewww-image-optimizer/wordpress-ewww-image-optimizer-plugin-7-2-0-sensitive-data-exposure-vulnerability.