CVE-2023-40600

published 2023-11-30

CVE-2023-40600: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exactly WWW EWWW Image Optimizer. It works only when debug.log is turned on.This…

Priority P2 75 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

ITW EXPLOIT VulnCheck KEV

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exactly WWW EWWW Image Optimizer. It works only when debug.log is turned on.This issue affects EWWW Image Optimizer: from n/a through 7.2.0.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ewww	image_optimizer	< 7.2.1	7.2.1
exactly_www	ewww_image_optimizer	n/a – 7.2.0	—

Detection & IOCs extracted from sources · hover to see the quote

path /wp-content/ewww/debug.log↗

filename debug.log↗

• → Detect unauthenticated GET requests to /wp-content/ewww/debug.log returning HTTP 200 with body containing both 'ewww_image_optimizer' and '__construct()' strings. ↗
• → Exposure is triggered via the debug_log function in EWWW Image Optimizer; monitor for unauthenticated access to the plugin's debug log path. ↗

• · The vulnerability is only exploitable when debug logging is enabled in the EWWW Image Optimizer plugin; the debug.log file will not exist or be populated otherwise. ↗

CVSS provenance

nvd v3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

vulncheck 7.5 HIGH

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200