CVE-2022-1186CWE-200

Be POPIA Compliant <= 1.1.5 - Sensitive Information Exposure

Medium · published April 19, 2022

CVSS v3.1
5.3
EPSS
1%
Percentile
67.2
In the wild
Unconfirmed
What it is

The WordPress plugin Be POPIA Compliant exposed sensitive information to unauthenticated users consisting of site visitors emails and usernames via an API route, in versions up to an including 1.1.5.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01170 · 67.2th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2022-04-19T20:26Z
EPSS history
Timeline
  • 19 APR 20:26Z
    Be POPIA Compliant <= 1.1.5 - Sensitive Information Exposure
    cvelistv5