cleantalk
Vulnerabilities and Security Researches

Simple Author Box, CVE-2023-3601

CVE, Research URL

CVE-2023-3601

Application

Simple Author Box

Published on
Aug 15, 2023
Research Description
The Simple Author Box WordPress plugin before 2.52 does not verify a user ID before outputting information about that user, leading to arbitrary user information disclosure to users with a role as low as Contributor.
Affected versions
max 2.52.
Status
vulnerable