CVE-2023-3601

The Simple Author Box WordPress plugin before 2.52 does not verify a user ID before outputting information about that user, leading to arbitrary user information disclosure to users with a role as low as Contributor.

Score

CVSS 3.1 4.3 Medium

Status

Modified - contact@wpscan.com

Published

2023-08-14

Last modified

2025-05-05

Affected products

• Simple Author Box (Unknown)
• Simple Author Box (Webfactoryltd)

References

• https://wpscan.com/vulnerability/c0cc513e-c306-4920-9afb-e33d95a7292f