CVE-2023-39999

score

<0.1

cvss

4.3

epss

1.2%

published

2023-10-13

kev added

—

first seen

2026-10-21

WordPress versions from 4.1 through 4.1.38, 4.2 through 4.2.35, 4.3 through 4.3.31, 4.4 through 4.4.30, 4.5 through 4.5.29, 4.6 through 4.6.26, 4.7 through 4.7.26, 4.8 through 4.8.22, 4.9 through 4.9.23, 5.0 through 5.0.19, 5.1 through 5.1.16, 5.2 through 5.2.18, 5.3 through 5.3.15, 5.4 through 5.4.13, 5.5 through 5.5.12, 5.6 through 5.6.11, 5.7 through 5.7.9, 5.8 through 5.8.7, 5.9 through 5.9.7, 6.0 through 6.0.5, 6.1 through 6.13, 6.2 through 6.2.2, and 6.3 through 6.3.1 contain an exposure of sensitive information to an unauthorized actor caused by insufficient access controls in various components, letting attackers access sensitive data, exploit requires no special privileges or user interaction.