PT-2024-14940 · WordPress · Export Wp Page To Static Html/Css
Alex Thomas
·
Published
2024-01-11
·
Updated
2025-06-03
·
CVE-2023-6369
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Export WP Page to Static HTML/CSS plugin for WordPress versions up to, and including, 2.1.9
Description
The issue is related to a missing capability check on multiple AJAX actions, allowing authenticated attackers with subscriber-level access and above to access and modify sensitive data. This can lead to the disclosure of sensitive information or the performance of unauthorized actions, such as saving advanced plugin settings.
Recommendations
For Export WP Page to Static HTML/CSS plugin for WordPress versions up to, and including, 2.1.9, update to a version higher than 2.1.9 to resolve the issue.
As a temporary workaround, consider restricting access to the AJAX actions until a patch is available.
Restrict subscriber-level access and above to minimize the risk of exploitation.
Fix
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Export Wp Page To Static Html/Css