Sensitive Information Exposure in WP Meta SEO Plugin for WordPress

CVE-2023-6962

What is CVE-2023-6962?

The WP Meta SEO plugin for WordPress exhibits a vulnerability that allows attackers to expose sensitive information contained in the meta description of password-protected posts. This flaw could be exploited by unauthenticated users, enabling them to access potentially sensitive data that should remain protected. It affects all versions of the plugin up to and including 4.5.12. It is essential for users of the WP Meta SEO plugin to implement updates and practices that mitigate this exposure and protect sensitive content.

References