CVE-2023-44150CWE-200

WordPress ProfilePress Plugin <= 4.13.2 is vulnerable to Sensitive Data Exposure

High · published November 30, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
55.7
In the wild
Unconfirmed
What it is

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress.This issue affects Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress: from n/a through 4.13.2.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00788 · 55.7th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2023-11-30T14:50Z
EPSS history
Timeline
  • 30 NOV 14:50Z
    WordPress ProfilePress Plugin <= 4.13.2 is vulnerable to Sensitive Data Exposure
    cvelistv5