CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
The Broadstreet plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.53.1 via the get_sponsored_meta() AJAX action. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract data from password protected and private business details.
Explanation of Vulnerability in Simple Terms
Broadstreet versions up to 1.53.1 expose sensitive information to unauthenticated attackers over the network. The vulnerability allows an attacker to read data that should be restricted, such as configuration details or user information. No user interaction is required. Update to version 1.53.2 or later to resolve this issue.
What an attacker can do
Read sensitive information from the Broadstreet installation without authentication.
Potential impact on your site
Sensitive data may be exposed to anyone on the internet who discovers the vulnerable endpoint.
Conditions required to exploit
Network access to the Broadstreet instance; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
