CVE-2023-4800

CWE-4253 documents3 sources
Severity
6.5MEDIUM
EPSS
8.4%
top 7.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Unknown Dologin SecurityWpdo Dologin Security
Timeline
PublishedOct 16

Description

The DoLogin Security WordPress plugin before 3.7.1 does not restrict the access of a widget that shows the IPs of failed logins to low privileged users.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5unknown/dologin_security< 3.7.1

🔴Vulnerability Details

2
CVEList
DoLogin Security < 3.7.1 - Subscriber+ IP Address leak↗2023-10-16
▶
GHSA
GHSA-8ch2-m9x4-vgjv: The DoLogin Security WordPress plugin before 3↗2023-10-16
▶
CVE-2023-4800 (MEDIUM CVSS 6.5) | The DoLogin Security WordPress plug | cvebase.io