CVE-2023-40600

Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 30/11/2023 Updated: 06/12/2023

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 0

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exactly WWW EWWW Image Optimizer. It works only when debug.log is turned on.This issue affects EWWW Image Optimizer: from n/a up to and including 7.2.0.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ewww image optimizer

EWWW Image Optimizer <= 7.2.0 - Unauthenticated Sensitive Information Exposure via Debug Log

CVE-2023-40600 EWWW Image Optimizer <= 720 - Unauthenticated Sensitive Information Exposure via Debug Log Description The EWWW Image Optimizer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 720 via the debug_log function This makes it possible for unauthenticated attackers to extract sensitive debug data wh

NVD-CWE-noinfo https://patchstack.com/database/vulnerability/ewww-image-optimizer/wordpress-ewww-image-optimizer-plugin-7-2-0-sensitive-data-exposure-vulnerability?_s_id=cve https://nvd.nist.gov https://github.com/RandomRobbieBF/CVE-2023-40600

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-40600

Vulnerability Summary

Github Repositories

References

Vulmon Search

About

Products

Connect