WordPress Vulnerabilities

WP < 6.3.2 - Contributor+ Comment Disclosure

Description

WordPress does not properly restrict comments to be accessed, allowing contributor to read comments on private and password protect posts they don't have access to

Affects WordPress

6.3.1
Fixed in WordPress 6.3.2
6.3
Fixed in WordPress 6.3.2
6.2.2
Fixed in WordPress 6.2.3
6.2.1
Fixed in WordPress 6.2.3
6.2
Fixed in WordPress 6.2.3
6.1.3
Fixed in WordPress 6.1.4
6.1.2
Fixed in WordPress 6.1.4
6.1.1
Fixed in WordPress 6.1.4
6.1
Fixed in WordPress 6.1.4
6.0.5
Fixed in WordPress 6.0.6
6.0.4
Fixed in WordPress 6.0.6
6.0.3
Fixed in WordPress 6.0.6
6.0.2
Fixed in WordPress 6.0.6
6.0.1
Fixed in WordPress 6.0.6
6.0
Fixed in WordPress 6.0.6
5.9.7
Fixed in WordPress 5.9.8
5.9.6
Fixed in WordPress 5.9.8
5.9.5
Fixed in WordPress 5.9.8
5.9.4
Fixed in WordPress 5.9.8
5.9.3
Fixed in WordPress 5.9.8
5.9.2
Fixed in WordPress 5.9.8
5.9.1
Fixed in WordPress 5.9.8
5.9
Fixed in WordPress 5.9.8
5.8.7
Fixed in WordPress 5.8.8
5.8.6
Fixed in WordPress 5.8.8
5.8.5
Fixed in WordPress 5.8.8
5.8.4
Fixed in WordPress 5.8.8
5.8.3
Fixed in WordPress 5.8.8
5.8.2
Fixed in WordPress 5.8.8
5.8.1
Fixed in WordPress 5.8.8
5.8
Fixed in WordPress 5.8.8
5.7.9
Fixed in WordPress 5.7.10
5.7.8
Fixed in WordPress 5.7.10
5.7.7
Fixed in WordPress 5.7.10
5.7.6
Fixed in WordPress 5.7.10
5.7.5
Fixed in WordPress 5.7.10
5.7.4
Fixed in WordPress 5.7.10
5.7.3
Fixed in WordPress 5.7.10
5.7.2
Fixed in WordPress 5.7.10
5.7.1
Fixed in WordPress 5.7.10
5.7
Fixed in WordPress 5.7.10
5.6.11
Fixed in WordPress 5.6.12
5.6.10
Fixed in WordPress 5.6.12
5.6.9
Fixed in WordPress 5.6.12
5.6.8
Fixed in WordPress 5.6.12
5.6.7
Fixed in WordPress 5.6.12
5.6.6
Fixed in WordPress 5.6.12
5.6.5
Fixed in WordPress 5.6.12
5.6.4
Fixed in WordPress 5.6.12
5.6.3
Fixed in WordPress 5.6.12
5.6.2
Fixed in WordPress 5.6.12
5.6.1
Fixed in WordPress 5.6.12
5.6
Fixed in WordPress 5.6.12
5.5.12
Fixed in WordPress 5.5.13
5.5.11
Fixed in WordPress 5.5.13
5.5.10
Fixed in WordPress 5.5.13
5.5.9
Fixed in WordPress 5.5.13
5.5.8
Fixed in WordPress 5.5.13
5.5.7
Fixed in WordPress 5.5.13
5.5.6
Fixed in WordPress 5.5.13
5.5.5
Fixed in WordPress 5.5.13
5.5.4
Fixed in WordPress 5.5.13
5.5.3
Fixed in WordPress 5.5.13
5.5.2
Fixed in WordPress 5.5.13
5.5.1
Fixed in WordPress 5.5.13
5.5
Fixed in WordPress 5.5.13
5.4.13
Fixed in WordPress 5.4.14
5.4.12
Fixed in WordPress 5.4.14
5.4.11
Fixed in WordPress 5.4.14
5.4.10
Fixed in WordPress 5.4.14
5.4.9
Fixed in WordPress 5.4.14
5.4.8
Fixed in WordPress 5.4.14
5.4.7
Fixed in WordPress 5.4.14
5.4.6
Fixed in WordPress 5.4.14
5.4.5
Fixed in WordPress 5.4.14
5.4.4
Fixed in WordPress 5.4.14
5.4.3
Fixed in WordPress 5.4.14
5.4.2
Fixed in WordPress 5.4.14
5.4.1
Fixed in WordPress 5.4.14
5.4
Fixed in WordPress 5.4.14
5.3.15
Fixed in WordPress 5.3.16
5.3.14
Fixed in WordPress 5.3.16
5.3.13
Fixed in WordPress 5.3.16
5.3.12
Fixed in WordPress 5.3.16
5.3.11
Fixed in WordPress 5.3.16
5.3.10
Fixed in WordPress 5.3.16
5.3.9
Fixed in WordPress 5.3.16
5.3.8
Fixed in WordPress 5.3.16
5.3.7
Fixed in WordPress 5.3.16
5.3.6
Fixed in WordPress 5.3.16
5.3.5
Fixed in WordPress 5.3.16
5.3.4
Fixed in WordPress 5.3.16
5.3.3
Fixed in WordPress 5.3.16
5.3.2
Fixed in WordPress 5.3.16
5.3.1
Fixed in WordPress 5.3.16
5.3
Fixed in WordPress 5.3.16
5.2.18
Fixed in WordPress 5.2.19
5.2.17
Fixed in WordPress 5.2.19
5.2.16
Fixed in WordPress 5.2.19
5.2.15
Fixed in WordPress 5.2.19
5.2.14
Fixed in WordPress 5.2.19
5.2.13
Fixed in WordPress 5.2.19
5.2.12
Fixed in WordPress 5.2.19
5.2.11
Fixed in WordPress 5.2.19
5.2.10
Fixed in WordPress 5.2.19
5.2.9
Fixed in WordPress 5.2.19
5.2.8
Fixed in WordPress 5.2.19
5.2.7
Fixed in WordPress 5.2.19
5.2.6
Fixed in WordPress 5.2.19
5.2.5
Fixed in WordPress 5.2.19
5.2.4
Fixed in WordPress 5.2.19
5.2.3
Fixed in WordPress 5.2.19
5.2.2
Fixed in WordPress 5.2.19
5.2.1
Fixed in WordPress 5.2.19
5.2
Fixed in WordPress 5.2.19
5.1.16
Fixed in WordPress 5.1.17
5.1.15
Fixed in WordPress 5.1.17
5.1.14
Fixed in WordPress 5.1.17
5.1.13
Fixed in WordPress 5.1.17
5.1.12
Fixed in WordPress 5.1.17
5.1.11
Fixed in WordPress 5.1.17
5.1.10
Fixed in WordPress 5.1.17
5.1.9
Fixed in WordPress 5.1.17
5.1.8
Fixed in WordPress 5.1.17
5.1.7
Fixed in WordPress 5.1.17
5.1.6
Fixed in WordPress 5.1.17
5.1.5
Fixed in WordPress 5.1.17
5.1.4
Fixed in WordPress 5.1.17
5.1.3
Fixed in WordPress 5.1.17
5.1.2
Fixed in WordPress 5.1.17
5.1.1
Fixed in WordPress 5.1.17
5.1
Fixed in WordPress 5.1.17
5.0.19
Fixed in WordPress 5.0.20
5.0.18
Fixed in WordPress 5.0.20
5.0.17
Fixed in WordPress 5.0.20
5.0.16
Fixed in WordPress 5.0.20
5.0.15
Fixed in WordPress 5.0.20
5.0.14
Fixed in WordPress 5.0.20
5.0.13
Fixed in WordPress 5.0.20
5.0.12
Fixed in WordPress 5.0.20
5.0.11
Fixed in WordPress 5.0.20
5.0.10
Fixed in WordPress 5.0.20
5.0.9
Fixed in WordPress 5.0.20
5.0.8
Fixed in WordPress 5.0.20
5.0.7
Fixed in WordPress 5.0.20
5.0.6
Fixed in WordPress 5.0.20
5.0.5
Fixed in WordPress 5.0.20
5.0.4
Fixed in WordPress 5.0.20
5.0.3
Fixed in WordPress 5.0.20
5.0.2
Fixed in WordPress 5.0.20
5.0.1
Fixed in WordPress 5.0.20
5.0
Fixed in WordPress 5.0.20
4.9.23
Fixed in WordPress 4.9.24
4.9.22
Fixed in WordPress 4.9.24
4.9.21
Fixed in WordPress 4.9.24
4.9.20
Fixed in WordPress 4.9.24
4.9.19
Fixed in WordPress 4.9.24
4.9.18
Fixed in WordPress 4.9.24
4.9.17
Fixed in WordPress 4.9.24
4.9.16
Fixed in WordPress 4.9.24
4.9.15
Fixed in WordPress 4.9.24
4.9.14
Fixed in WordPress 4.9.24
4.9.13
Fixed in WordPress 4.9.24
4.9.12
Fixed in WordPress 4.9.24
4.9.11
Fixed in WordPress 4.9.24
4.9.10
Fixed in WordPress 4.9.24
4.9.9
Fixed in WordPress 4.9.24
4.9.8
Fixed in WordPress 4.9.24
4.9.7
Fixed in WordPress 4.9.24
4.9.6
Fixed in WordPress 4.9.24
4.9.5
Fixed in WordPress 4.9.24
4.9.4
Fixed in WordPress 4.9.24
4.9.3
Fixed in WordPress 4.9.24
4.9.2
Fixed in WordPress 4.9.24
4.9.1
Fixed in WordPress 4.9.24
4.9
Fixed in WordPress 4.9.24
4.8.22
Fixed in WordPress 4.8.23
4.8.21
Fixed in WordPress 4.8.23
4.8.20
Fixed in WordPress 4.8.23
4.8.19
Fixed in WordPress 4.8.23
4.8.18
Fixed in WordPress 4.8.23
4.8.17
Fixed in WordPress 4.8.23
4.8.16
Fixed in WordPress 4.8.23
4.8.15
Fixed in WordPress 4.8.23
4.8.14
Fixed in WordPress 4.8.23
4.8.13
Fixed in WordPress 4.8.23
4.8.12
Fixed in WordPress 4.8.23
4.8.11
Fixed in WordPress 4.8.23
4.8.10
Fixed in WordPress 4.8.23
4.8.9
Fixed in WordPress 4.8.23
4.8.8
Fixed in WordPress 4.8.23
4.8.7
Fixed in WordPress 4.8.23
4.8.6
Fixed in WordPress 4.8.23
4.8.5
Fixed in WordPress 4.8.23
4.8.4
Fixed in WordPress 4.8.23
4.8.3
Fixed in WordPress 4.8.23
4.8.2
Fixed in WordPress 4.8.23
4.8.1
Fixed in WordPress 4.8.23
4.8
Fixed in WordPress 4.8.23
4.7.26
Fixed in WordPress 4.7.27
4.7.25
Fixed in WordPress 4.7.27
4.7.24
Fixed in WordPress 4.7.27
4.7.23
Fixed in WordPress 4.7.27
4.7.22
Fixed in WordPress 4.7.27
4.7.21
Fixed in WordPress 4.7.27
4.7.20
Fixed in WordPress 4.7.27
4.7.19
Fixed in WordPress 4.7.27
4.7.18
Fixed in WordPress 4.7.27
4.7.17
Fixed in WordPress 4.7.27
4.7.16
Fixed in WordPress 4.7.27
4.7.15
Fixed in WordPress 4.7.27
4.7.14
Fixed in WordPress 4.7.27
4.7.13
Fixed in WordPress 4.7.27
4.7.12
Fixed in WordPress 4.7.27
4.7.11
Fixed in WordPress 4.7.27
4.7.10
Fixed in WordPress 4.7.27
4.7.9
Fixed in WordPress 4.7.27
4.7.8
Fixed in WordPress 4.7.27
4.7.7
Fixed in WordPress 4.7.27
4.7.6
Fixed in WordPress 4.7.27
4.7.5
Fixed in WordPress 4.7.27
4.7.4
Fixed in WordPress 4.7.27
4.7.3
Fixed in WordPress 4.7.27
4.7.2
Fixed in WordPress 4.7.27
4.7.1
Fixed in WordPress 4.7.27
4.7
Fixed in WordPress 4.7.27
4.6.26
Fixed in WordPress 4.6.27
4.6.25
Fixed in WordPress 4.6.27
4.6.24
Fixed in WordPress 4.6.27
4.6.23
Fixed in WordPress 4.6.27
4.6.22
Fixed in WordPress 4.6.27
4.6.21
Fixed in WordPress 4.6.27
4.6.20
Fixed in WordPress 4.6.27
4.6.19
Fixed in WordPress 4.6.27
4.6.18
Fixed in WordPress 4.6.27
4.6.17
Fixed in WordPress 4.6.27
4.6.16
Fixed in WordPress 4.6.27
4.6.15
Fixed in WordPress 4.6.27
4.6.14
Fixed in WordPress 4.6.27
4.6.13
Fixed in WordPress 4.6.27
4.6.12
Fixed in WordPress 4.6.27
4.6.11
Fixed in WordPress 4.6.27
4.6.10
Fixed in WordPress 4.6.27
4.6.9
Fixed in WordPress 4.6.27
4.6.8
Fixed in WordPress 4.6.27
4.6.7
Fixed in WordPress 4.6.27
4.6.6
Fixed in WordPress 4.6.27
4.6.5
Fixed in WordPress 4.6.27
4.6.4
Fixed in WordPress 4.6.27
4.6.3
Fixed in WordPress 4.6.27
4.6.2
Fixed in WordPress 4.6.27
4.6.1
Fixed in WordPress 4.6.27
4.6
Fixed in WordPress 4.6.27
4.5.29
Fixed in WordPress 4.5.30
4.5.28
Fixed in WordPress 4.5.30
4.5.27
Fixed in WordPress 4.5.30
4.5.26
Fixed in WordPress 4.5.30
4.5.25
Fixed in WordPress 4.5.30
4.5.24
Fixed in WordPress 4.5.30
4.5.23
Fixed in WordPress 4.5.30
4.5.22
Fixed in WordPress 4.5.30
4.5.21
Fixed in WordPress 4.5.30
4.5.20
Fixed in WordPress 4.5.30
4.5.19
Fixed in WordPress 4.5.30
4.5.18
Fixed in WordPress 4.5.30
4.5.17
Fixed in WordPress 4.5.30
4.5.16
Fixed in WordPress 4.5.30
4.5.15
Fixed in WordPress 4.5.30
4.5.14
Fixed in WordPress 4.5.30
4.5.13
Fixed in WordPress 4.5.30
4.5.12
Fixed in WordPress 4.5.30
4.5.11
Fixed in WordPress 4.5.30
4.5.10
Fixed in WordPress 4.5.30
4.5.9
Fixed in WordPress 4.5.30
4.5.8
Fixed in WordPress 4.5.30
4.5.7
Fixed in WordPress 4.5.30
4.5.6
Fixed in WordPress 4.5.30
4.5.5
Fixed in WordPress 4.5.30
4.5.4
Fixed in WordPress 4.5.30
4.5.3
Fixed in WordPress 4.5.30
4.5.2
Fixed in WordPress 4.5.30
4.5.1
Fixed in WordPress 4.5.30
4.5
Fixed in WordPress 4.5.30
4.4.30
Fixed in WordPress 4.4.31
4.4.29
Fixed in WordPress 4.4.31
4.4.28
Fixed in WordPress 4.4.31
4.4.27
Fixed in WordPress 4.4.31
4.4.26
Fixed in WordPress 4.4.31
4.4.25
Fixed in WordPress 4.4.31
4.4.24
Fixed in WordPress 4.4.31
4.4.23
Fixed in WordPress 4.4.31
4.4.22
Fixed in WordPress 4.4.31
4.4.21
Fixed in WordPress 4.4.31
4.4.20
Fixed in WordPress 4.4.31
4.4.19
Fixed in WordPress 4.4.31
4.4.18
Fixed in WordPress 4.4.31
4.4.17
Fixed in WordPress 4.4.31
4.4.16
Fixed in WordPress 4.4.31
4.4.15
Fixed in WordPress 4.4.31
4.4.14
Fixed in WordPress 4.4.31
4.4.13
Fixed in WordPress 4.4.31
4.4.12
Fixed in WordPress 4.4.31
4.4.11
Fixed in WordPress 4.4.31
4.4.10
Fixed in WordPress 4.4.31
4.4.9
Fixed in WordPress 4.4.31
4.4.8
Fixed in WordPress 4.4.31
4.4.7
Fixed in WordPress 4.4.31
4.4.6
Fixed in WordPress 4.4.31
4.4.5
Fixed in WordPress 4.4.31
4.4.4
Fixed in WordPress 4.4.31
4.4.3
Fixed in WordPress 4.4.31
4.4.2
Fixed in WordPress 4.4.31
4.4.1
Fixed in WordPress 4.4.31
4.4
Fixed in WordPress 4.4.31
4.3.21
Fixed in WordPress 4.3.22
4.3.20
Fixed in WordPress 4.3.22
4.3.19
Fixed in WordPress 4.3.22
4.3.18
Fixed in WordPress 4.3.22
4.3.17
Fixed in WordPress 4.3.22
4.3.16
Fixed in WordPress 4.3.22
4.3.15
Fixed in WordPress 4.3.22
4.3.14
Fixed in WordPress 4.3.22
4.3.13
Fixed in WordPress 4.3.22
4.3.12
Fixed in WordPress 4.3.22
4.3.11
Fixed in WordPress 4.3.22
4.3.10
Fixed in WordPress 4.3.22
4.3.9
Fixed in WordPress 4.3.22
4.3.8
Fixed in WordPress 4.3.22
4.3.7
Fixed in WordPress 4.3.22
4.3.6
Fixed in WordPress 4.3.22
4.3.5
Fixed in WordPress 4.3.22
4.3.4
Fixed in WordPress 4.3.22
4.3.3
Fixed in WordPress 4.3.22
4.3.2
Fixed in WordPress 4.3.22
4.3.1
Fixed in WordPress 4.3.22
4.3
Fixed in WordPress 4.3.22
4.2.35
Fixed in WordPress 4.2.36
4.2.34
Fixed in WordPress 4.2.36
4.2.33
Fixed in WordPress 4.2.36
4.2.32
Fixed in WordPress 4.2.36
4.2.31
Fixed in WordPress 4.2.36
4.2.30
Fixed in WordPress 4.2.36
4.2.29
Fixed in WordPress 4.2.36
4.2.28
Fixed in WordPress 4.2.36
4.2.27
Fixed in WordPress 4.2.36
4.2.26
Fixed in WordPress 4.2.36
4.2.25
Fixed in WordPress 4.2.36
4.2.24
Fixed in WordPress 4.2.36
4.2.23
Fixed in WordPress 4.2.36
4.2.22
Fixed in WordPress 4.2.36
4.2.21
Fixed in WordPress 4.2.36
4.2.20
Fixed in WordPress 4.2.36
4.2.19
Fixed in WordPress 4.2.36
4.2.18
Fixed in WordPress 4.2.36
4.2.17
Fixed in WordPress 4.2.36
4.2.16
Fixed in WordPress 4.2.36
4.2.15
Fixed in WordPress 4.2.36
4.2.14
Fixed in WordPress 4.2.36
4.2.13
Fixed in WordPress 4.2.36
4.2.12
Fixed in WordPress 4.2.36
4.2.11
Fixed in WordPress 4.2.36
4.2.10
Fixed in WordPress 4.2.36
4.2.9
Fixed in WordPress 4.2.36
4.2.8
Fixed in WordPress 4.2.36
4.2.7
Fixed in WordPress 4.2.36
4.2.6
Fixed in WordPress 4.2.36
4.2.5
Fixed in WordPress 4.2.36
4.2.4
Fixed in WordPress 4.2.36
4.2.3
Fixed in WordPress 4.2.36
4.2.2
Fixed in WordPress 4.2.36
4.2.1
Fixed in WordPress 4.2.36
4.2
Fixed in WordPress 4.2.36
4.1.38
Fixed in WordPress 4.1.39
4.1.37
Fixed in WordPress 4.1.39
4.1.36
Fixed in WordPress 4.1.39
4.1.35
Fixed in WordPress 4.1.39
4.1.34
Fixed in WordPress 4.1.39
4.1.33
Fixed in WordPress 4.1.39
4.1.32
Fixed in WordPress 4.1.39
4.1.31
Fixed in WordPress 4.1.39
4.1.30
Fixed in WordPress 4.1.39
4.1.29
Fixed in WordPress 4.1.39
4.1.28
Fixed in WordPress 4.1.39
4.1.27
Fixed in WordPress 4.1.39
4.1.26
Fixed in WordPress 4.1.39
4.1.25
Fixed in WordPress 4.1.39
4.1.24
Fixed in WordPress 4.1.39
4.1.23
Fixed in WordPress 4.1.39
4.1.22
Fixed in WordPress 4.1.39
4.1.21
Fixed in WordPress 4.1.39
4.1.20
Fixed in WordPress 4.1.39
4.1.19
Fixed in WordPress 4.1.39
4.1.18
Fixed in WordPress 4.1.39
4.1.17
Fixed in WordPress 4.1.39
4.1.16
Fixed in WordPress 4.1.39
4.1.15
Fixed in WordPress 4.1.39
4.1.14
Fixed in WordPress 4.1.39
4.1.13
Fixed in WordPress 4.1.39
4.1.12
Fixed in WordPress 4.1.39
4.1.11
Fixed in WordPress 4.1.39
4.1.10
Fixed in WordPress 4.1.39
4.1.9
Fixed in WordPress 4.1.39
4.1.8
Fixed in WordPress 4.1.39
4.1.7
Fixed in WordPress 4.1.39
4.1.6
Fixed in WordPress 4.1.39
4.1.5
Fixed in WordPress 4.1.39
4.1.4
Fixed in WordPress 4.1.39
4.1.3
Fixed in WordPress 4.1.39
4.1.2
Fixed in WordPress 4.1.39
4.1.1
Fixed in WordPress 4.1.39
4.1
Fixed in WordPress 4.1.39

References

CVE
CVE-2023-39999
URL
https://wordpress.org/news/2023/10/wordpress-6-3-2-maintenance-and-security-release/

Classification

Type
SENSITIVE DATA DISCLOSURE
OWASP top 10
A3: Sensitive Data Exposure
CWE
CWE-200
CVSS
2.7 (low)

Miscellaneous

Original Researcher
Rafie Muhammad, Jb Audras
Verified
No
WPVDB ID
d35b2a3d-9b41-4b4f-8e87-1b8ccb370b9f

Timeline

Publicly Published
2023-10-12 (about 6 months ago)
Added
2023-10-13 (about 6 months ago)
Last Updated
2023-10-13 (about 6 months ago)

Other

Published
Title
Published
2023-11-28
Title
Media File Renamer < 5.7.0 - Sensitive Information Exposure via Log File
Published
2024-04-05
Title
SearchIQ < 4.6 - Unauthenticated Sensitive Information Exposure
Published
2021-03-26
Title
Patreon WordPress < 1.7.0 - Unauthenticated Local File Disclosure
Published
2023-06-26
Title
EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor < 3.8.0 - Sensitive Data Disclosure
Published
2022-10-31
Title
DeepL Pro API Translation < 1.7.5 - API Key Disclosure