CVE-2023-4645

Summary

CVE-2023-4645 is a Sensitive Information Exposure vulnerability affecting the Ad Inserter plugin for WordPress. Versions up to and including 2.7.30 are vulnerable. The issue lies within the ai_ajax function, which can be exploited by unauthenticated attackers to extract sensitive data. This includes post titles and slugs, even those of protected posts and their passwords, usernames, and available roles. The plugin license key can also be obtained if the remote debugging option is enabled, which is disabled by default.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.