Headline
CVE-2023-23978: WordPress WP Client Reports plugin <= 1.0.16 - Subscriber+ Sensitive Data Exposure - Patchstack
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SwitchWP WP Client Reports plugin <= 1.0.16 versions.
Solution
Fixed
Update the WordPress WP Client Reports plugin to the latest available version (at least 1.0.17).
Found this useful? Thank Rafshanzani Suhada for reporting this vulnerability. Buy a coffee ☕
Rafshanzani Suhada discovered and reported this Sensitive Data Exposure vulnerability in WordPress WP Client Reports Plugin. This vulnerability has been fixed in version 1.0.17.
No other known vulnerabilities for this pluginReport
WordPress plugin developer?
Start a free security program for your WordPress plugins or request an audit.
Apply for MVDP
Security researcher?
Report to Patchstack Alliance bounty platform and earn monthly cash prizes.
Learn more