CVE-2023-4242

FULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Information Disclosure via Health Check

Severity Score

4.3

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The FULL - Customer plugin for WordPress is vulnerable to Information Disclosure via the /health REST route in versions up to, and including, 2.2.3 due to improper authorization. This allows authenticated attackers with subscriber-level permissions and above to obtain sensitive information about the site configuration as disclosed by the WordPress health check.

*Credits: Ramuel Gall

CVSS Scores

Wordfencev3.1 4.3

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2023-08-08 CVE Reserved
2023-08-08 CVE Published
2024-08-02 CVE Updated
2024-08-15 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-287: Improper Authentication
CWE-863: Incorrect Authorization

CAPEC

References (2)

URL	Tag	Source
https://plugins.trac.wordpress.org/browser/full-customer/tags/1.1.0/app/api/Health.php	Product
https://www.wordfence.com/threat-intel/vulnerabilities/id/a77d0fb5-8829-407d-a40a-169cf0c5f837?source=cve	Third Party Advisory

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Full Search vendor "Full"		Full - Customer Search vendor "Full" for product "Full - Customer"				<= 2.2.3 Search vendor "Full" for product "Full - Customer" and version " <= 2.2.3"		wordpress		Affected