CVE-2023-3601
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
The Simple Author Box WordPress plugin before version 2.52 does not verify a user ID before outputting information about that user, leading to arbitrary user information disclosure to users with a role as low as Contributor.
Risk Assessment
Disclosure of user information may lead to privacy violations and increased risk of social engineering attacks within the organization.
Recommendation
It is recommended to update the Simple Author Box plugin to version 2.52 or later to mitigate the risk of user information disclosure.
Original NVD description (English source)
The Simple Author Box WordPress plugin before 2.52 does not verify a user ID before outputting information about that user, leading to arbitrary user information disclosure to users with a role as low as Contributor.