CVE-2023-5905

DeMomentSomTres WordPress Export Posts With Images <= 20220825 - Subscriber+ unauthorized data export

High · published January 15, 2024

CVSS v3.1
8.1
EPSS
1%
Percentile
46.9
In the wild
Unconfirmed
What it is

The DeMomentSomTres WordPress Export Posts With Images WordPress plugin through 20220825 does not check authorization of requests to export the blog data, allowing any logged in user, such as subscribers to export the contents of the blog, including restricted and unpublished posts, as well as passwords of protected posts.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00579 · 46.9th percentile
Published
2024-01-15T15:10Z
EPSS history
Timeline
  • 15 JAN 15:10Z
    DeMomentSomTres WordPress Export Posts With Images <= 20220825 - Subscriber+ unauthorized data export
    cvelistv5