CVE-2023-45066
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Nov 30, 2023
Updated: Dec 6, 2023
CWE ID 200
Summary
CVE-2023-45066 is a vulnerability affecting Smackcoders' Export All Posts, Products, Orders, Refunds & Users plugin. This issue exposes sensitive information to unauthorized actors. The vulnerability allows an attacker to access sensitive data, including posts, products, orders, refunds, and user information, from versions 2.4.1 and below. This exposure can lead to potential data breaches and unauthorized access to confidential information. Users are encouraged to update their plugins to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.