CVE-2023-49822: WordPress Ultimate Dashboard plugin <= 3.7.10 - Secret Login Page Location Disclosure on Multisites vulnerability
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in David Vongries Ultimate Dashboard allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Ultimate Dashboard: from n/a through 3.7.10.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-49822?
CVE-2023-49822 is categorized as a moderate severity vulnerability due to the potential exposure of sensitive information.
How do I fix CVE-2023-49822?
To fix CVE-2023-49822, update the Ultimate Dashboard plugin to version 3.7.11 or later.
What kind of information can be exposed due to CVE-2023-49822?
CVE-2023-49822 may allow unauthorized access to functionalities that are not properly constrained by Access Control Lists (ACLs), leading to potential information exposure.
Which versions of Ultimate Dashboard are affected by CVE-2023-49822?
CVE-2023-49822 affects all versions of Ultimate Dashboard up to and including version 3.7.10.
Who is the vendor of the software affected by CVE-2023-49822?
The vendor of the affected software is David Vongries.