VDB
BDU%3A2023-08227
BDU%3A2023-08227
PUBLISHED
CVSS 5 MEDIUM
Уязвимость реализации прикладного программного интерфейса системы управления содержимым сайта WordPress, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Risk Scores
CVSS 2.0
5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| WordPress | WordPress | 6.3.0, 6.2.0, 6.1.0 |
| Сообщество свободного программного обеспечения, WordPress Foundation | Debian GNU/Linux, WordPress |
Timeline
- Oct 16, 2023 CVE Published
- Oct 17, 2023 PoC Published
- Nov 26, 2023 PoC Published
- Nov 26, 2023 PoC Published
- Feb 7, 2025 CVE Updated
- Mar 5, 2025 PoC Published
- Apr 1, 2025 PoC Published
- Apr 2, 2025 PoC Published
- Jul 1, 2025 PoC Published
- Jul 1, 2025 PoC Published
- Oct 30, 2025 PoC Published
- Dec 17, 2025 PoC Published
References
- https://github.com/advisories/GHSA-x7w6-3cp2-qjcv url
- https://wpscan.com/blog/email-leak-oracle-vulnerability-addressed-in-wordpress-6-3-2/ url
- https://wpscan.com/vulnerability/19380917-4c27-4095-abf1-eba6f913b441 exploit
- https://lists.debian.org/debian-lts-announce/2023/11/msg00014.html url
- https://vuldb.com/ru/?id.242139 url
- https://wpscan.com/vulnerability/19380917-4c27-4095-abf1-eba6f913b441/ url
- https://wordpress.org/news/2023/10/wordpress-6-3-2-maintenance-and-security-release/ advisory