← CVE Intelligence

CVE-2023-6824

WP Customer Area < 8.2.1 - Subscriber+ Account Address Leak PUBLISHED

Description (CNA)

The WP Customer Area WordPress plugin before 8.2.1 does not properly validates user capabilities in some of its AJAX actions, allowing any users to retrieve other user's account address.

Affected (CNA)

Vendor / productVersions
Unknown / WP Customer Areaaffected 0 before 8.2.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.