CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in WPMinds Simple WP Events simple-wp-events allows Retrieve Embedded Sensitive Data.This issue affects Simple WP Events: from n/a through <= 1.8.17.
Explanation of Vulnerability in Simple Terms
Simple WP Events versions 1.8.17 and earlier contain an information disclosure vulnerability. An attacker can read sensitive data without authentication by exploiting improper access controls. The vulnerability requires only network access and no user interaction. Site administrators should update to a version newer than 1.8.17 immediately.
What an attacker can do
Read sensitive data from the plugin without logging in.
Potential impact on your site
Sensitive information may be exposed to unauthenticated visitors.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
