WordPress Plugin Vulnerabilities

WP SMS < 6.0.4.1 - Information Disclosure via REST API

Description

The plugin does not implement proper authorization, leading to sensitive information disclosure.

Affects Plugins

Plugin icon
wp-sms
Fixed in 6.0.4.1

References

CVE
CVE-2023-27447

Classification

Type
SENSITIVE DATA DISCLOSURE
OWASP top 10
A3: Sensitive Data Exposure
CWE
CWE-200
CVSS
5.3 (medium)

Miscellaneous

Original Researcher
Jarko Piironen
Verified
No
WPVDB ID
79190a6c-c622-4256-8a48-f47b562dcfb5

Timeline

Publicly Published
2023-03-02 (about 1 years ago)
Added
2023-08-30 (about 8 months ago)
Last Updated
2023-08-30 (about 8 months ago)

Other

Published
Title
Published
2023-07-10
Title
LMS by Masteriyo < 1.6.8 - Information Exposure
Published
2023-10-16
Title
404 Solution < 2.33.1 - Sensitive Information Exposure
Published
2022-11-10
Title
Clerk < 4.0.0 - Authentication Bypass and API Keys Disclosure
Published
2022-07-04
Title
Shareaholic < 9.7.6 - Information Disclosure
Published
2024-04-03
Title
Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) < 3.2.10 - Sensitive Information Exposure