Comment Edit Core - WordPress Plugin Sensitive Information Exposure Vulnerability
Vulnerability
A vulnerability allowing unauthenticated sensitive information exposure has been identified in the Comment Edit Core - Simple Comment Editing plugin for WordPress, affecting all versions through 3.1.0. The issue arises in the 'ajax_get_comment' function, where it is possible for attackers to extract sensitive data such as user IDs, IP addresses, and email addresses.
Impact
Exploitation of this vulnerability could lead to unauthorized access to sensitive user information, including IDs, IP addresses, and email addresses.
Remediation
Users are advised to update the Comment Edit Core - Simple Comment Editing plugin to version 3.2.0 or later.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
