CVE-2023-4668: Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai-debug-processing-fe
The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the ai-debug-processing-fe URL parameter. This can allow unauthenticated attackers to extract sensitive data including installed plugins (present and active), active theme, various plugin settings, WordPress version, as well as some server settings such as memory limit, installation paths.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2023-4668?
CVE-2023-4668 is a vulnerability found in the Ad Inserter for WordPress plugin, allowing unauthenticated attackers to extract sensitive information.
What is the severity of CVE-2023-4668?
The severity of CVE-2023-4668 is high, with a CVSS score of 7.5.
How does CVE-2023-4668 affect the Ad Inserter for WordPress plugin?
CVE-2023-4668 affects versions up to, and including, 2.7.30 of the Ad Inserter for WordPress plugin, allowing unauthenticated attackers to extract sensitive data.
What can unauthenticated attackers do with CVE-2023-4668?
Unauthenticated attackers can use CVE-2023-4668 to extract sensitive data such as installed plugins, active theme, and more.
Is there a fix available for CVE-2023-4668?
Yes, a fix is available for CVE-2023-4668. Users should update to version 2.7.31 or later of the Ad Inserter for WordPress plugin.