Vulnerability · Published Apr 5, 2024 · Assigned by Wordfence
CVE-2023-5692WordPress Core <= 6.4.3 - Sensitive Information Exposure via redirect_guess_404_permalink
Medium 5.3
In plain English
A medium-severity information exposure in WordPress from WordPress Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
WordPress Core is vulnerable to Sensitive Information Exposure in versions up to, and including, 6.4.3 via the redirect_guess_404_permalink function. This can allow unauthenticated attackers to expose the slug of a custom post whose 'publicly_queryable' post status has been set to 'false'.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | wordpress | no fix listed | DEBIAN-CVE-2023-5692 |
| Debian:13 | wordpress | 6.5+dfsg1-1 | DEBIAN-CVE-2023-5692 |
| Debian:14 | wordpress | 6.5+dfsg1-1 | DEBIAN-CVE-2023-5692 |
| Ubuntu:22.04:LTS | wordpress | no fix listed | UBUNTU-CVE-2023-5692 |
| Ubuntu:24.04:LTS | wordpress | no fix listed | UBUNTU-CVE-2023-5692 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| WordPress Foundation | WordPress | 0 – through 6.4.3 |
Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References
- https://www.wordfence.com/threat-intel/vulnerabilities/id/6e6f993b-ce09-4050-84a1-cbe9953f36b1?source=cve
- https://github.com/WordPress/wordpress-develop/blob/6.3/src/wp-includes/canonical.php#L763
- https://developer.wordpress.org/reference/functions/is_post_publicly_viewable/
- https://developer.wordpress.org/reference/functions/is_post_type_viewable/
- https://core.trac.wordpress.org/changeset/57645