CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in esigngenie Foxit eSign for WordPress esign-genie-for-wp allows Retrieve Embedded Sensitive Data.This issue affects Foxit eSign for WordPress: from n/a through <= 2.0.3.
Explanation of Vulnerability in Simple Terms
The Foxit eSign for WordPress plugin through version 2.0.3 exposes sensitive information to authenticated administrators. An attacker with high-level site access can read data they should not have permission to view. The vulnerability requires administrator privileges and does not affect site availability or allow data modification.
What an attacker can do
Read sensitive information they should not have access to as an administrator.
Potential impact on your site
Administrators with malicious intent or compromised admin accounts can access confidential data stored by the plugin.
Conditions required to exploit
Attacker must have administrator-level access to the WordPress site.
Key dates
External resources
