Medium · published October 13, 2023
Exposure of Sensitive Information to an Unauthorized Actor in WordPress from 6.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.13, from 6.0 through 6.0.5, from 5.9 through 5.9.7, from 5.8 through 5.8.7, from 5.7 through 5.7.9, from 5.6 through 5.6.11, from 5.5 through 5.5.12, from 5.4 through 5.4.13, from 5.3 through 5.3.15, from 5.2 through 5.2.18, from 5.1 through 5.1.16, from 5.0 through 5.0.19, from 4.9 through 4.9.23, from 4.8 through 4.8.22, from 4.7 through 4.7.26, from 4.6 through 4.6.26, from 4.5 through 4.5.29, from 4.4 through 4.4.30, from 4.3 through 4.3.31, from 4.2 through 4.2.35, from 4.1 through 4.1.38.
| Product | Versions | Fixed in |
|---|---|---|
| wordpress/wordpress | ≥ 4.1, ≤ 4.1.38 | — |
| wordpress/wordpress | ≥ 4.2, ≤ 4.2.35 | — |
| wordpress/wordpress | ≥ 4.3, ≤ 4.3.31 | — |
| wordpress/wordpress | ≥ 4.4, ≤ 4.4.30 | — |
| wordpress/wordpress | ≥ 4.5, ≤ 4.5.29 | — |
| wordpress/wordpress | ≥ 4.6, ≤ 4.6.26 | — |
| wordpress/wordpress | ≥ 4.7, ≤ 4.7.26 | — |
| wordpress/wordpress | ≥ 4.8, ≤ 4.8.22 | — |
| wordpress/wordpress | ≥ 4.9, ≤ 4.9.23 | — |
| wordpress/wordpress | ≥ 5.0, ≤ 5.0.19 | — |
| wordpress/wordpress | ≥ 5.1, ≤ 5.1.16 | — |
| wordpress/wordpress | ≥ 5.2, ≤ 5.2.18 | — |
| wordpress/wordpress | ≥ 5.3, ≤ 5.3.15 | — |
| wordpress/wordpress | ≥ 5.4, ≤ 5.4.13 | — |
| wordpress/wordpress | ≥ 5.5, ≤ 5.5.12 | — |
| wordpress/wordpress | ≥ 5.6, ≤ 5.6.11 | — |
| wordpress/wordpress | ≥ 5.7, ≤ 5.7.9 | — |
| wordpress/wordpress | ≥ 5.8, ≤ 5.8.7 | — |
| wordpress/wordpress | ≥ 5.9, ≤ 5.9.7 | — |
| wordpress/wordpress | ≥ 6.0, ≤ 6.0.5 | — |
| wordpress/wordpress | ≥ 6.1, ≤ 6.1.3 | — |
| wordpress/wordpress | ≥ 6.2, ≤ 6.2.2 | — |
| wordpress/wordpress | ≥ 6.3, < 6.3.2 | 6.3.2 |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |