CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Markus Drubba wpLike2Get wplike2get allows Retrieve Embedded Sensitive Data.This issue affects wpLike2Get: from n/a through <= 1.2.9.
Explanation of Vulnerability in Simple Terms
wpLike2Get versions 1.2.9 and earlier expose sensitive information to unauthenticated attackers over the network. The vulnerability allows reading of non-public data without requiring user interaction or special network conditions. No code execution or data modification is possible through this flaw.
What an attacker can do
Read sensitive information from the site without authentication.
Potential impact on your site
Confidential data may be exposed to anyone on the internet who knows how to request it.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
