PT-2023-27531 · Unknown · Ewww Image Optimizer

Mika · CVE-2023-40600 · Publicado 2023-11-30 · Atualizado 2026-02-18

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions EWWW Image Optimizer versions through 7.2.0

Description The issue is related to the exposure of sensitive information to an unauthorized actor. It only occurs when the debug.log is turned on.

Recommendations For versions through 7.2.0, turn off the debug.log to prevent the exposure of sensitive information. As a temporary workaround, consider restricting access to sensitive information until a patch is available.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2023-40600

Produtos afetados

Ewww Image Optimizer

Referências · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40600.json · Exploit
• https://osv.dev/vulnerability/CVE-2023-40600 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1730244123804811302 · Publicação no Twitter
• https://twitter.com/pdnuclei_bot/status/2024000964504744144 · Publicação no Twitter
• https://patchstack.com/database/vulnerability/ewww-image-optimizer/wordpress-ewww-image-optimizer-plugin-7-2-0-sensitive-data-exposure-vulnerability?_s_id=cve · Nota
• https://t.me/cvenotify/62444 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-40600 · Nota de Segurança
• https://wordpress.org/plugins · Nota