CVE-2023-3601

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

The Simple Author Box WordPress plugin before 2.52 does not verify a user ID before outputting information about that user, leading to arbitrary user information disclosure to users with a role as low as Contributor.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected software

VendorProductVersions
UnknownSimple Author Box< 2.52

References

Timeline

Published
Aug 14, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-360107.5Microsoft Defender Denial of Service VulnerabilityCVE-2023-360117.8Win32k Elevation of Privilege VulnerabilityCVE-2023-360125.3DHCP Server Service Information Disclosure VulnerabilityCVE-2023-360136.5PowerShell Information Disclosure VulnerabilityCVE-2023-360147.3Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2023-360163.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2023-360178.8Windows Scripting Engine Memory Corruption VulnerabilityCVE-2023-360189.8Visual Studio Code Jupyter Extension Spoofing VulnerabilityCVE-2023-360197.4Microsoft Power Platform Connector Spoofing VulnerabilityCVE-2023-360205.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2023-360218.0Microsoft On-Prem Data Gateway Security Feature Bypass VulnerabilityCVE-2023-360226.6Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2023-3601: Medium severity, CVSS 4.3 | Vulnix