The Seriously Simple Podcasting WordPress plugin before 3.0.0 discloses the Podcast owner's email address (which by default is the admin email address) via an unauthenticated crafted request.
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/061c59d6-f4a0-4cd1-b945-5e92b9c2b4aa/ | Exploit Third Party Advisory |
https://wpscan.com/vulnerability/061c59d6-f4a0-4cd1-b945-5e92b9c2b4aa/ | Exploit Third Party Advisory |
Configurations
History
01 May 2025, 00:09
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:castos:seriously_simple_podcasting:*:*:*:*:*:wordpress:*:* | |
First Time |
Castos seriously Simple Podcasting
Castos |
|
References | () https://wpscan.com/vulnerability/061c59d6-f4a0-4cd1-b945-5e92b9c2b4aa/ - Exploit, Third Party Advisory | |
CWE | NVD-CWE-noinfo |
21 Nov 2024, 08:43
Type | Values Removed | Values Added |
---|---|---|
References | () https://wpscan.com/vulnerability/061c59d6-f4a0-4cd1-b945-5e92b9c2b4aa/ - |
05 Aug 2024, 18:35
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
11 Mar 2024, 18:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-03-11 18:15
Updated : 2025-05-01 00:09
NVD link : CVE-2023-6444
Mitre link : CVE-2023-6444
CVE.ORG link : CVE-2023-6444
JSON object : View
Products Affected
castos
- seriously_simple_podcasting
CWE