https://github.com/randomrobbiebf/cve-2023-47668
Restrict Content <= 3.2.7 - Information Exposure via legacy log file
https://github.com/randomrobbiebf/cve-2023-47668
Last synced: 5 months ago
JSON representation
Restrict Content <= 3.2.7 - Information Exposure via legacy log file
- Host: GitHub
- URL: https://github.com/randomrobbiebf/cve-2023-47668
- Owner: RandomRobbieBF
- Created: 2023-11-14T08:40:49.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2023-11-14T08:41:53.000Z (over 2 years ago)
- Last Synced: 2025-10-14T03:32:44.622Z (9 months ago)
- Size: 1000 Bytes
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# CVE-2023-47668
Restrict Content <= 3.2.7 - Information Exposure via legacy log file
### Description:
The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.7 via the legacy log file. This makes it possible for unauthenticated attackers to extract sensitive data including debug information.
```
Severity: medium
CVE ID: CVE-2023-47668
CVSS Score: 5.3
CVSS Metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Plugin Slug: restrict-content
WPScan URL: https://www.wpscan.com/plugin/restrict-content
Reference URL: https://www.wordfence.com/threat-intel/vulnerabilities/id/ad2d5070-ddc6-4478-abe5-776e197a4507?source=api-prod
```
POC
---
`/wp-content/uploads/rcp-debug.log`