Vulnerability Description
The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the ai-debug-processing-fe URL parameter. This can allow unauthenticated attackers to extract sensitive data including installed plugins (present and active), active theme, various plugin settings, WordPress version, as well as some server settings such as memory limit, installation paths.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ad Inserter Project | Ad Inserter | < 2.7.31 |
Related Weaknesses (CWE)
References
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&newPatch
- https://www.wordfence.com/threat-intel/vulnerabilities/id/ce457c98-c55b-4b71-a80Third Party Advisory
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&newPatch
- https://www.wordfence.com/threat-intel/vulnerabilities/id/ce457c98-c55b-4b71-a80Third Party Advisory
FAQ
What is CVE-2023-4668?
CVE-2023-4668 is a vulnerability with a CVSS score of 5.3 (MEDIUM). The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the ai-debug-processing-fe URL parameter. This can allow unauthenticated atta...
How severe is CVE-2023-4668?
CVE-2023-4668 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-4668?
Check the references section above for vendor advisories and patch information. Affected products include: Ad Inserter Project Ad Inserter.