CVSS: 5.4EPSS: %CPEs: 1EXPL: 0CVE-2023-32798 – Simple Page Ordering <= 2.5.0 - Missing Authorization to Information Disclosure
https://notcve.org/view.php?id=CVE-2023-32798
The Simple Page Ordering plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the rest_page_ordering function in versions up to, and including, 2.5.0. This makes it possible for subscriber-level attackers to obtain structural information maintained by the plugin. • CWE-862: Missing Authorization •
CVSS: 4.4EPSS: 0%CPEs: 56EXPL: 0CVE-2023-20698
https://notcve.org/view.php?id=CVE-2023-20698
This could lead to local information disclosure with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/May-2023 • CWE-125: Out-of-bounds Read •
CVSS: 4.4EPSS: 0%CPEs: 57EXPL: 0CVE-2023-20711
https://notcve.org/view.php?id=CVE-2023-20711
This could lead to local information disclosure with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/May-2023 • CWE-125: Out-of-bounds Read •
CVSS: 5.5EPSS: 0%CPEs: 15EXPL: 0CVE-2023-20703
https://notcve.org/view.php?id=CVE-2023-20703
This could lead to local information disclosure with no additional execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/May-2023 • CWE-125: Out-of-bounds Read •
CVSS: 4.4EPSS: 0%CPEs: 54EXPL: 0CVE-2023-20709
https://notcve.org/view.php?id=CVE-2023-20709
This could lead to local information disclosure with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/May-2023 • CWE-20: Improper Input Validation •