Vulnerabilities > CVE-2023-6748 - Insecure Storage of Sensitive Information vulnerability in Wpgogo Custom Field Template

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

low complexity

wpgogo

CWE-922

NVD

Published: 2024-06-11

Updated: 2025-01-29

Summary

The Custom Field Template plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.1 via the 'cft' shortcode. This makes it possible for authenticated attackers with contributor access and above, to extract sensitive data including arbitrary post metadata.

Vulnerable Configurations

Part	Description	Count
Application	Wpgogo Wpgogo Custom Field Template - Wpgogo Custom Field Template 0.1 Wpgogo Custom Field Template 0.1.1 Wpgogo Custom Field Template 0.2 Wpgogo Custom Field Template 0.3.1 Wpgogo Custom Field Template 0.3.2 Wpgogo Custom Field Template 0.4 Wpgogo Custom Field Template 0.4.1 Wpgogo Custom Field Template 0.4.2 Wpgogo Custom Field Template 0.4.3 Wpgogo Custom Field Template 0.4.4 Wpgogo Custom Field Template 0.5 Wpgogo Custom Field Template 0.5.0 Wpgogo Custom Field Template 0.5.1 Wpgogo Custom Field Template 0.5.2 Wpgogo Custom Field Template 0.5.3 Wpgogo Custom Field Template 0.6 Wpgogo Custom Field Template 0.6.1 Wpgogo Custom Field Template 0.6.2 Wpgogo Custom Field Template 0.6.3 Wpgogo Custom Field Template 0.6.4 Wpgogo Custom Field Template 0.6.5 Wpgogo Custom Field Template 0.7 Wpgogo Custom Field Template 0.7.1 Wpgogo Custom Field Template 0.7.2 Wpgogo Custom Field Template 0.7.3 Wpgogo Custom Field Template 0.7.4 Wpgogo Custom Field Template 0.8 Wpgogo Custom Field Template 0.9 Wpgogo Custom Field Template 0.9.1 Wpgogo Custom Field Template 0.9.2 Wpgogo Custom Field Template 1.0 Wpgogo Custom Field Template 1.0.1 Wpgogo Custom Field Template 1.0.2 Wpgogo Custom Field Template 1.0.3 Wpgogo Custom Field Template 1.0.4 Wpgogo Custom Field Template 1.0.5 Wpgogo Custom Field Template 1.0.6 Wpgogo Custom Field Template 1.0.7 Wpgogo Custom Field Template 1.0.8 Wpgogo Custom Field Template 1.1 Wpgogo Custom Field Template 1.1.1 Wpgogo Custom Field Template 1.1.2 Wpgogo Custom Field Template 1.1.3 Wpgogo Custom Field Template 1.1.4 Wpgogo Custom Field Template 1.1.5 Wpgogo Custom Field Template 1.1.6 Wpgogo Custom Field Template 1.1.7 Wpgogo Custom Field Template 1.2 Wpgogo Custom Field Template 1.2.1 Wpgogo Custom Field Template 1.2.2 Wpgogo Custom Field Template 1.2.3 Wpgogo Custom Field Template 1.2.4 Wpgogo Custom Field Template 1.2.5 Wpgogo Custom Field Template 1.2.6 Wpgogo Custom Field Template 1.2.7 Wpgogo Custom Field Template 1.3 Wpgogo Custom Field Template 1.3.0 Wpgogo Custom Field Template 1.3.1 Wpgogo Custom Field Template 1.3.2 Wpgogo Custom Field Template 1.3.3 Wpgogo Custom Field Template 1.3.4 Wpgogo Custom Field Template 1.3.5 Wpgogo Custom Field Template 1.3.6 Wpgogo Custom Field Template 1.3.7 Wpgogo Custom Field Template 1.3.8 Wpgogo Custom Field Template 1.4 Wpgogo Custom Field Template 1.4.1 Wpgogo Custom Field Template 1.4.2 Wpgogo Custom Field Template 1.4.3 Wpgogo Custom Field Template 1.4.4 Wpgogo Custom Field Template 1.4.5 Wpgogo Custom Field Template 1.4.6 Wpgogo Custom Field Template 1.4.7 Wpgogo Custom Field Template 1.4.8 Wpgogo Custom Field Template 1.4.9 Wpgogo Custom Field Template 1.5 Wpgogo Custom Field Template 1.5.1 Wpgogo Custom Field Template 1.5.2 Wpgogo Custom Field Template 1.5.3 Wpgogo Custom Field Template 1.5.4 Wpgogo Custom Field Template 1.5.5 Wpgogo Custom Field Template 1.5.6 Wpgogo Custom Field Template 1.5.7 Wpgogo Custom Field Template 1.6 Wpgogo Custom Field Template 1.6.1 Wpgogo Custom Field Template 1.6.2 Wpgogo Custom Field Template 1.6.3 Wpgogo Custom Field Template 1.6.4 Wpgogo Custom Field Template 1.6.5 Wpgogo Custom Field Template 1.6.6 Wpgogo Custom Field Template 1.6.7 Wpgogo Custom Field Template 1.6.8 Wpgogo Custom Field Template 1.6.9 Wpgogo Custom Field Template 1.7 Wpgogo Custom Field Template 1.7.1 Wpgogo Custom Field Template 1.7.2 Wpgogo Custom Field Template 1.7.3 Wpgogo Custom Field Template 1.7.4 Wpgogo Custom Field Template 1.7.5 Wpgogo Custom Field Template 1.7.6 Wpgogo Custom Field Template 1.7.7 Wpgogo Custom Field Template 1.7.8 Wpgogo Custom Field Template 1.7.9 Wpgogo Custom Field Template 1.8 Wpgogo Custom Field Template 1.8.1 Wpgogo Custom Field Template 1.8.2 Wpgogo Custom Field Template 1.8.3 Wpgogo Custom Field Template 1.8.4 Wpgogo Custom Field Template 1.8.5 Wpgogo Custom Field Template 1.8.6 Wpgogo Custom Field Template 1.8.7 Wpgogo Custom Field Template 1.8.8 Wpgogo Custom Field Template 1.8.9 Wpgogo Custom Field Template 1.9 Wpgogo Custom Field Template 1.9.1 Wpgogo Custom Field Template 1.9.2 Wpgogo Custom Field Template 1.9.3 Wpgogo Custom Field Template 1.9.4 Wpgogo Custom Field Template 1.9.5 Wpgogo Custom Field Template 1.9.6 Wpgogo Custom Field Template 1.9.7 Wpgogo Custom Field Template 1.9.8 Wpgogo Custom Field Template 1.9.9 Wpgogo Custom Field Template 2.0 Wpgogo Custom Field Template 2.0.1 Wpgogo Custom Field Template 2.0.2 Wpgogo Custom Field Template 2.0.3 Wpgogo Custom Field Template 2.0.4 Wpgogo Custom Field Template 2.0.5 Wpgogo Custom Field Template 2.0.6 Wpgogo Custom Field Template 2.0.7 Wpgogo Custom Field Template 2.0.8 Wpgogo Custom Field Template 2.0.9 Wpgogo Custom Field Template 2.1 Wpgogo Custom Field Template 2.1.1 Wpgogo Custom Field Template 2.1.2 Wpgogo Custom Field Template 2.1.3 Wpgogo Custom Field Template 2.1.4 Wpgogo Custom Field Template 2.1.5 Wpgogo Custom Field Template 2.1.6 Wpgogo Custom Field Template 2.1.7 Wpgogo Custom Field Template 2.1.8 Wpgogo Custom Field Template 2.1.9 Wpgogo Custom Field Template 2.2 Wpgogo Custom Field Template 2.2.1 Wpgogo Custom Field Template 2.3 Wpgogo Custom Field Template 2.3.1 Wpgogo Custom Field Template 2.3.2 Wpgogo Custom Field Template 2.3.3 Wpgogo Custom Field Template 2.3.4 Wpgogo Custom Field Template 2.3.5 Wpgogo Custom Field Template 2.3.6 Wpgogo Custom Field Template 2.3.7 Wpgogo Custom Field Template 2.3.8 Wpgogo Custom Field Template 2.3.9 Wpgogo Custom Field Template 2.4 Wpgogo Custom Field Template 2.4.1 Wpgogo Custom Field Template 2.4.2 Wpgogo Custom Field Template 2.4.3 Wpgogo Custom Field Template 2.4.4 Wpgogo Custom Field Template 2.4.5 Wpgogo Custom Field Template 2.4.6 Wpgogo Custom Field Template 2.4.7 Wpgogo Custom Field Template 2.4.8 Wpgogo Custom Field Template 2.4.9 Wpgogo Custom Field Template 2.5 Wpgogo Custom Field Template 2.5.1 Wpgogo Custom Field Template 2.5.2 Wpgogo Custom Field Template 2.5.3 Wpgogo Custom Field Template 2.5.4 Wpgogo Custom Field Template 2.5.5 Wpgogo Custom Field Template 2.5.6 Wpgogo Custom Field Template 2.5.7 Wpgogo Custom Field Template 2.5.8 Wpgogo Custom Field Template 2.5.9 Wpgogo Custom Field Template 2.6.0 Wpgogo Custom Field Template 2.6.1	178

Common Weakness Enumeration (CWE)

CWE-922 - Insecure Storage of Sensitive Information

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References