CVE-2023-5576: Migration, Backup, Staging – WPvivid <= 0.9.91 - Google Drive Client Secret Exposure
The Migration, Backup, Staging - WPvivid plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 0.9.91 via Google Drive API secrets stored in plaintext in the publicly visible plugin source. This could allow unauthenticated attackers to impersonate the WPVivid Google Drive account via the API if they can trick a user into reauthenticating via another vulnerability or social engineering.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-5576?
The severity of CVE-2023-5576 is critical with a CVSS score of 9.3.
How does CVE-2023-5576 affect the Migration Backup Staging - WPvivid plugin for WordPress?
CVE-2023-5576 affects versions up to and including 0.9.91 of the Migration Backup Staging - WPvivid plugin for WordPress.
What is the vulnerability description of CVE-2023-5576?
CVE-2023-5576 is a vulnerability in the Migration Backup Staging - WPvivid plugin for WordPress that allows sensitive information exposure through plaintext storage of Google Drive API secrets in the publicly visible plugin source.
How can unauthenticated attackers exploit CVE-2023-5576?
Unauthenticated attackers can exploit CVE-2023-5576 to impersonate legitimate users and gain unauthorized access.
Are there any patches or updates available to fix CVE-2023-5576?
Yes, to fix CVE-2023-5576, it is recommended to update to a version of the Migration Backup Staging - WPvivid plugin for WordPress that is above 0.9.91.