Unrated

WordPress EWWW Image Optimizer Plugin <= 7.2.0 is vulnerable to Sensitive Data Exposure

CVE-2023-40600 First seen on SecPulse Dec 1, 2023

Original description The description as published by the source.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exactly WWW EWWW Image Optimizer. It works only when debug.log is turned on.This issue affects EWWW Image Optimizer: from n/a through 7.2.0.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
advisory patchstack.com
web wordpress.org

Key facts

Severity: Unrated
Published: Dec 1, 2023
First seen on SecPulse: Dec 1, 2023
CWE: CWE-200

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:58