CVE-2023-4686
First published: Wed Nov 22 2023(Updated: )
The WP Customer Reviews plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.6.6 via the ajax_enabled_posts function. This can allow authenticated attackers to extract sensitive data such as post titles and slugs, including those of protected and trashed posts and pages in addition to other post types such as galleries.
Credit: security@wordfence.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| WP Customer Reviews | <=3.6.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://plugins.trac.wordpress.org/browser/wp-customer-reviews/trunk/include/admin/wp-customer-reviews-3-admin.php?rev=2617376#L866
- https://plugins.trac.wordpress.org/changeset/2965656/wp-customer-reviews/trunk?contextall=1&old=2882143&old_path=%2Fwp-customer-reviews%2Ftrunk
- https://www.wordfence.com/threat-intel/vulnerabilities/id/24b9984c-ec33-4492-815b-67a21ac4da0e?source=cve
Frequently Asked Questions
What is CVE-2023-4686?
CVE-2023-4686 is a vulnerability in the WP Customer Reviews plugin for WordPress that allows authenticated attackers to extract sensitive information, such as post titles and slugs.
What is the severity of CVE-2023-4686?
CVE-2023-4686 has a severity score of 4.3, which is considered medium.
How does CVE-2023-4686 occur?
CVE-2023-4686 occurs through the ajax_enabled_posts function in versions up to and including 3.6.6 of the WP Customer Reviews plugin for WordPress.
Can an attacker exploit CVE-2023-4686 remotely?
No, CVE-2023-4686 can only be exploited by authenticated attackers.
Is there a fix available for CVE-2023-4686?
Yes, you can update the WP Customer Reviews plugin to a version higher than 3.6.6 to mitigate the vulnerability.
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/weakness
- agent/remedy
- agent/references
- agent/severity
- agent/description
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- agent/software-canonical-lookup-request
- vendor/gowebsolutions
- canonical/wp customer reviews
- version/wp customer reviews/3.6.6