CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in viralloops Viral Loops WP Integration viral-loops-wp-integration allows Retrieve Embedded Sensitive Data.This issue affects Viral Loops WP Integration: from n/a through <= 3.4.0.
Explanation of Vulnerability in Simple Terms
Viral Loops WP Integration versions 3.4.0 and earlier expose sensitive information to unauthenticated attackers over the network. The vulnerability allows reading of non-public data without requiring user interaction or special network conditions. Site administrators should update to a version newer than 3.4.0 to prevent unauthorized information disclosure.
What an attacker can do
Read sensitive information from the plugin without authentication.
Potential impact on your site
Sensitive data may be exposed to anyone on the internet who discovers the vulnerable endpoint.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
