Exposure of Sensitive Information to an Unauthorized Actor in WordPress from 6.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.13, from 6.0 through 6.0.5, from 5.9 through 5.9.7, from 5.8 through 5.8.7, from 5.7 through 5.7.9…

Overview

Exposure of Sensitive Information to an Unauthorized Actor in WordPress from 6.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.13, from 6.0 through 6.0.5, from 5.9 through 5.9.7, from 5.8 through 5.8.7, from 5.7 through 5.7.9, from 5.6 through 5.6.11, from 5.5 through 5.5.12, from 5.4 through 5.4.13, from 5.3 through 5.3.15, from 5.2 through 5.2.18, from 5.1 through 5.1.16, from 5.0 through 5.0.19, from 4.9 through 4.9.23, from 4.8 through 4.8.22, from 4.7 through 4.7.26, from 4.6 through 4.6.26, from 4.5 through 4.5.29, from 4.4 through 4.4.30, from 4.3 through 4.3.31, from 4.2 through 4.2.35, from 4.1 through 4.1.38.

Affected

• wordpress >= 4.1, <= 4.1.38
• wordpress >= 4.2, <= 4.2.35
• wordpress >= 4.3, <= 4.3.31
• wordpress >= 4.4, <= 4.4.30
• wordpress >= 4.5, <= 4.5.29
• wordpress >= 4.6, <= 4.6.26
• wordpress >= 4.7, <= 4.7.26
• wordpress >= 4.8, <= 4.8.22
• wordpress >= 4.9, <= 4.9.23
• wordpress >= 5.0, <= 5.0.19
• wordpress >= 5.1, <= 5.1.16
• wordpress >= 5.2, <= 5.2.18
• wordpress >= 5.3, <= 5.3.15
• wordpress >= 5.4, <= 5.4.13
• wordpress >= 5.5, <= 5.5.12
• wordpress >= 5.6, <= 5.6.11
• wordpress >= 5.7, <= 5.7.9
• wordpress >= 5.8, <= 5.8.7
• wordpress >= 5.9, <= 5.9.7
• wordpress >= 6.0, <= 6.0.5
• wordpress >= 6.1, <= 6.1.3
• wordpress >= 6.2, <= 6.2.2
• wordpress >= 6.3, < 6.3.2
• fedora = 37
• fedora = 38

Remediation

Upgrade past the affected range:

• wordpress 6.3.2