CVE-2019-14366

WP SlackSync plugin through 1.8.5 for WordPress leaks a Slack Access Token in source code

published November 12, 2019

CVSS
—
EPSS
2%
Percentile
76.7
In the wild
Unconfirmed
What it is

WP SlackSync plugin through 1.8.5 for WordPress leaks a Slack Access Token in source code. An attacker can obtain a lot of information about the victim's Slack (channels, members, etc.).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01677 · 76.7th percentile
Published
2019-11-12T20:47Z
EPSS history
Timeline
  • 12 NOV 20:47Z
    WP SlackSync plugin through 1.8.5 for WordPress leaks a Slack Access Token in source code
    cvelistv5