CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StudioWombat WP Optin Wheel – Gamified Optin Email Marketing Tool for WordPress and WooCommerce.This issue affects WP Optin Wheel – Gamified Optin Email Marketing Tool for WordPress and WooCommerce: from n/a through 1.4.3.
Explanation of Vulnerability in Simple Terms
The WP Optin Wheel plugin through version 1.4.3 exposes sensitive information in logs or error messages accessible without authentication. An attacker can read this data over the network without needing to log in or interact with a user. The plugin should be updated to prevent unauthorized information disclosure.
What an attacker can do
Read sensitive information from the plugin without logging in.
Potential impact on your site
Visitor data, configuration details, or other sensitive information may be exposed to anyone.
Conditions required to exploit
Network access to the WordPress site; no authentication required.
Key dates
External resources
Related vulnerabilities
