CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Steve Burge WordPress Tag Cloud Plugin – Tag Groups tag-groups.This issue affects WordPress Tag Cloud Plugin – Tag Groups: from n/a through <= 2.0.3.
Explanation of Vulnerability in Simple Terms
The Tag Groups plugin for WordPress exposes sensitive information that should not be publicly accessible. An unauthenticated attacker can read this data over the network without any special setup or user interaction. The exposure is limited to information disclosure; the attacker cannot modify or disable site functionality. All versions up to 2.0.3 are affected.
What an attacker can do
Read sensitive information that the plugin exposes without authentication.
Potential impact on your site
Sensitive data may be visible to anyone visiting your site or scanning it remotely.
Conditions required to exploit
Network access to the WordPress site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
