CVE-2023-6444

Seriously Simple Podcasting < 3.0.0 - Unauthenticated Administrator Email Disclosure

Medium · published March 11, 2024

CVSS v3.1
5.3
EPSS
2%
Percentile
84.3
In the wild
Unconfirmed
What it is

The Seriously Simple Podcasting WordPress plugin before 3.0.0 discloses the Podcast owner's email address (which by default is the admin email address) via an unauthenticated crafted request.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02463 · 84.3th percentile
Published
2024-03-11T17:56Z
EPSS history
Timeline
  • 11 MAR 17:56Z
    Seriously Simple Podcasting < 3.0.0 - Unauthenticated Administrator Email Disclosure
    cvelistv5