CVE-2023-5692

Summary

CVE-2023-5692 is a vulnerability affecting WordPress Core versions up to 6.4.3. This issue permits unauthenticated attackers to expose the slug of custom posts with the 'publicly_queryable' status set to 'false'. The vulnerability is due to a flaw in the 'redirect_guess_404_permalink' function, which can lead to sensitive information exposure. This issue poses a potential security risk, as it allows unauthorized access to information that should not be publicly accessible. It is recommended that WordPress users upgrade to the latest version to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.