CVE-2023-5692

WordPress Core <= 6.4.3 - Sensitive Information Exposure via redirect_guess_404_permalink

Summary

Original description

The description as published by the source.

WordPress Core is vulnerable to Sensitive Information Exposure in versions up to, and including, 6.4.3 via the redirect_guess_404_permalink function. This can allow unauthenticated attackers to expose the slug of a custom post whose 'publicly_queryable' post status has been set to 'false'.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2023-5692 wordpress

References

advisory github.com
advisory nvd.nist.gov
web core.trac.wordpress.org
web developer.wordpress.org
web developer.wordpress.org
web github.com
web wordfence.com

Metadata

CVE: CVE-2023-5692
Published: 2024-04-05
First seen on SecPulse: 2 years ago
First-seen source: OSV.dev (Open Source Vulnerabilities)

CWE

CWE-200

Detection sources

OSV.dev (Open Source Vulnerabilities) 2 months ago