CVE-2023-5692

Fixed in a distro release EPSS <1%CVSS 5.3

WordPress Core is vulnerable to Sensitive Information Exposure in versions up to, and including, 6.4.3 via the redirect_guess_404_permalink function. This can allow unauthenticated attackers to expose the slug of a custom post whose 'publicly_queryable' post status has been set to 'false'.

Published 2024-04-05 · CVE record · OSV

Products: WordPress Foundation WordPress

Distro releases