CVE-2023-6444 - Seriously Simple Podcasting < 3.0.0 - Unauthenticated Administrator Email Disclosure

Back Back to CVE browser

MEDIUM

Seriously Simple Podcasting < 3.0.0 - Unauthenticated Administrator Email Disclosure

Published Mar 11, 2024

5.3

MEDIUM

CVSS 3.1

EPSS 2.46%

Description

The Seriously Simple Podcasting WordPress plugin before 3.0.0 discloses the Podcast owner's email address (which by default is the admin email address) via an unauthenticated crafted request.

Affected products

Vendor n/a Product Seriously Simple Podcasting Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <3.0.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Seriously Simple Podcasting

unaffected

Version	Status	Constraints
0	affected	<3.0.0

Vendor Castos Product Seriously Simple Podcasting Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <3.0.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Castos

Seriously Simple Podcasting

unaffected

Version	Status	Constraints
0	affected	<3.0.0

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-58681
Advisory
https://wpscan.com/vulnerability/061c59d6-f4a0-4cd1-b945-5e92b9c2b4aa/
exploitvdb-entrytechnical-descriptionThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-58681		Advisory
https://wpscan.com/vulnerability/061c59d6-f4a0-4cd1-b945-5e92b9c2b4aa/		exploitvdb-entrytechnical-descriptionThird Party Advisory