Be POPIA Compliant <= 1.1.5 - Sensitive Information Exposure
CVE-2022-1186

5.3MEDIUM

Key Information:

Vendor: Bepopiacompliant
Status: Be Popia Compliant
Vendor: CVE Published:; 19 April 2022

🔔 Create Bepopiacompliant Vulnerability Alert

What is CVE-2022-1186?

The WordPress plugin Be POPIA Compliant exposed sensitive information to unauthenticated users consisting of site visitors emails and usernames via an API route, in versions up to an including 1.1.5.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Be POPIA Compliant * <= 1.1.5

References

https://www.wordfence.com/threat-intel/vulnerabilities/id...

https://plugins.trac.wordpress.org/changeset?sfp_email=&s...

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Apr 19, 2022
Vulnerability Reserved
Mar 30, 2022

Credit

Chris Meistre

JSON