CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in ThemeRuby Easy Post Submission easy-post-submission allows Retrieve Embedded Sensitive Data.This issue affects Easy Post Submission: from n/a through <= 1.7.0.
Explanation of Vulnerability in Simple Terms
Easy Post Submission versions up to 1.7.0 contain an information disclosure vulnerability affecting high-privilege users. An authenticated administrator can trigger a condition that leaks sensitive data across system boundaries due to improper access controls. The vulnerability requires high attack complexity and administrative credentials to exploit, limiting its practical impact to insider threats or compromised admin accounts.
What an attacker can do
Read sensitive information from the site or connected systems if they have admin access.
Potential impact on your site
If an admin account is compromised, an attacker can access confidential data beyond the plugin's scope.
Conditions required to exploit
Attacker must have administrator-level credentials and perform specific actions to trigger the flaw.
Key dates
External resources
Related vulnerabilities
