CVE-2023-6962

The WP Meta SEO plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.5.12 via the meta description. This makes it possible for unauthenticated attackers to disclose potentially sensitive information via the meta description of password-protected posts.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:joomunited:wp_meta_seo:*:*:*:*:*:wordpress:*:*

History

06 Feb 2025, 18:39

Type Values Removed Values Added
References () https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3071453%40wp-meta-seo%2Ftrunk&old=3068145%40wp-meta-seo%2Ftrunk&sfp_email=&sfph_mail= - () https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3071453%40wp-meta-seo%2Ftrunk&old=3068145%40wp-meta-seo%2Ftrunk&sfp_email=&sfph_mail= - Patch
References () https://www.wordfence.com/threat-intel/vulnerabilities/id/0323b54b-c15b-4d2d-9e8f-3df87c84dd49?source=cve - () https://www.wordfence.com/threat-intel/vulnerabilities/id/0323b54b-c15b-4d2d-9e8f-3df87c84dd49?source=cve - Third Party Advisory
CWE CWE-922
CVSS v2 : unknown
v3 : 5.3
v2 : unknown
v3 : unknown
CPE cpe:2.3:a:joomunited:wp_meta_seo:*:*:*:*:*:wordpress:*:*
First Time Joomunited
Joomunited wp Meta Seo

02 May 2024, 17:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-05-02 17:15

Updated : 2025-02-06 18:39


NVD link : CVE-2023-6962

Mitre link : CVE-2023-6962


JSON object : View

Products Affected

joomunited

  • wp_meta_seo
CWE
CWE-922

Insecure Storage of Sensitive Information