CVE-2023-6065

The Quttera Web Malware Scanner WordPress plugin before 3.4.2.1 doesn't restrict access to detailed scan logs, which allows a malicious actor to discover local paths and portions of the site's code

CVSS v3.1

5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

18.55% chance of exploitation in the next 30 days, 97th percentile

Nuclei

medium

Published

2023-12-18

Updated

2024-08-02

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/64f2557f-c5e4-4779-9e28-911dfaf2dda5

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6065.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2023-6064
• CVE-2023-6066
• CVE-2023-6063
• CVE-2023-6067
• CVE-2023-6054
• CVE-2023-6077