CVE-2023-7014

MEDIUM

Amitzy Molongui Authorship < 4.7.5 - Exposure to Wrong Actor

Title source: rule

Description

The Author Box, Guest Author and Co-Authors for Your Posts – Molongui plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.7.4 via the 'ma_debu' parameter. This makes it possible for unauthenticated attackers to extract sensitive data including post author emails and names if applicable.

References (2)

[Patch] https://plugins.trac.wordpress.org/changeset/3019084/

[Patch, Third Party Advisory] https://www.wordfence.com/threat-intel/vulnerabilities/id/538e9ce3-2d48-44ad-bd08-8eead3ef15c3?source=cve

Scores

CVSS v3 5.3

EPSS 0.0068

EPSS Percentile 71.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-359 CWE-668

Status published

Products (2)

amitzy/molongui_authorship < 4.7.5

molongui/Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress < 4.7.4

Published Feb 05, 2024

Tracked Since Feb 18, 2026