VulnerabilityModified
CVE-2023-7199
The Relevanssi WordPress plugin before 4.22.0, Relevanssi Premium WordPress plugin before 2.25.0 allows any unauthenticated user to read draft and private posts via a crafted request
MEDIUM 5.3EPSS 0.62%
Does this matter?
Lower severity and a low EPSS score (0.62%). Track it; it rarely justifies an emergency change on its own.
Description
The Relevanssi WordPress plugin before 4.22.0, Relevanssi Premium WordPress plugin before 2.25.0 allows any unauthenticated user to read draft and private posts via a crafted request
- CVSS 3.1
- 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 0.62% probability · 48th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-639
- Affected
- relevanssi/relevanssi
- Source
- contact@wpscan.com
References
- https://wpscan.com/vulnerability/0c96a128-4473-41f5-82ce-94bba33ca4a3/Exploit, Third Party Advisory
- https://www.relevanssi.com/release-notes/premium-2-25-free-4-22-release-notes/Patch
- https://wpscan.com/vulnerability/0c96a128-4473-41f5-82ce-94bba33ca4a3/Exploit, Third Party Advisory
- https://www.relevanssi.com/release-notes/premium-2-25-free-4-22-release-notes/Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.