CVE-2023-39999

Exposure of Sensitive Information to an Unauthorized Actor in WordPress from 6.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.13, from 6.0 through 6.0.5, from 5.9 through 5.9.7, from 5.8 through 5.8.7, from 5.7 through 5.7.9, from 5.6 through 5.6.11, from 5.5 through 5.5.12, from 5.4 through 5.4.13, from 5.3 through 5.3.15, from 5.2 through 5.2.18, from 5.1 through 5.1.16, from 5.0 through 5.0.19, from 4.9 through 4.9.23, from 4.8 through 4.8.22, from 4.7 through 4.7.26, from 4.6 through 4.6.26, from 4.5 through 4.5.29, from 4.4 through 4.4.30, from 4.3 through 4.3.31, from 4.2 through 4.2.35, from 4.1 through 4.1.38.

References

Affected packages

Git / github.com/wordpress/wordpress

Affected ranges

Type

GIT

Repo

https://github.com/wordpress/wordpress

Events

Introduced

e5e791f331d371ad6262c1893d84f5f2b6c26464

Last affected

206b164e27d3db60ddf5c0b5562b9f92e4fc6fe6

Introduced

87bf150016e042bc3e21f2f1cb9de44042b8cdb1

Last affected

85ae754b8902916c967ccee1d8040e0fb51cdd8f

Introduced

b57f3aa5f00a127f209eff74b78787dd3fd5ed4d

Last affected

02242f4554cbdaa345b4545eb0adad7179f1663f

Introduced

f6a29831c76d2dbe82e9ae673539f910654c58a4

Last affected

2e33df0588ff16f2f932717eddd35804efb8bc85

Introduced

e3aafee3f2bc07e09bf79389f20ea3db731466c3

Last affected

c129defefef81abe776424ddf459f3b04b7338db

Introduced

fe47e6139dbfc0f0c9ce0d79da77926b5fceaa77

Last affected

c12fc446e7d264326cdd77b62d66f3b7ba99379d

Introduced

14247ee4302378d292863865c643abe99bbfe3c7

Last affected

eb5a504bda5fac38796af50725e7f923bc1ad02e

Introduced

06fa4161aa74619239cf27017d124081c825684a

Last affected

7e6cddf8dd03933e0f0f5b44b6c89bec3843e4c7

Introduced

29ffbff370968ae48a1b7a34e35c8b8e75cf0f91

Last affected

dde4da7b797c6f3184834075f3c472a530fe03dd

Introduced

491c67be12ca8a9fe37ae38307ba7e298c976ec3

Last affected

0cac57854d9be31fae947b1ac07e9a6075974264

Introduced

c33464a4554cff8a082bc353d9226d8104b80d2b

Last affected

e6664bb77aa10b2fde05fe5d9b0631d43656c7b6

Introduced

6fe64752be3260f2a47f38e68c2cb77400e5a0c9

Last affected

95b6583c2bca8bfbbc0067f938057c60b2578b58

Introduced

50dc0ca5bb332c895f0f39fe4e6ee1e4a43e06dc

Last affected

18a1be2684e0cbd8c7ebebecfb9ca29b13d7d607

Introduced

9ff4499281663b0c772787fd4a60538288f842e9

Last affected

64da002d598dda6b682cb595bb317008253695b8

Introduced

537fd931bc02e6e934a2d774422b897871aa87ad

Last affected

efb471e7258d930659983062c5759fcbcab01867

Introduced

965fcddcf68cf4fd122ae24b992e242dfea1d773

Last affected

2876d269e6e74858e82dac0bea7cd86ea5a870ec

Introduced

058f9903676a7efaee534a682df0a2a8b87574d8

Last affected

61abfb66115c809782419ab4d5f491a62e08e345

Introduced

50caeb6e61ad0c49d2c7e1d6d5115047a011f590

Last affected

61d5032484ddbbd548b45f293245b3dc0e791ceb

Introduced

73157386d069425c5e6ea7c4fc0122e8a9b58a7b

Last affected

1fd6a06b5d9d09f5ace1f796b279cde5e254a734

Introduced

cc101b64012b16d087780657a2b828ccd7794a63

Last affected

b89fe813fed950c35894aa826c686fbf7487f062

Introduced

6c5d5b5dcb9712bfc400b09cb6627e42898527af

Last affected

61c8a5f2bab314a16cc5c8eb1064b2975129e9d6

Introduced

17e2eff4aa3beb2802cbec12b6f08e2fbf69893d

Last affected

9e0f2faa28f1aa04a69e0b4eaa410a38adcd2e1e

Introduced

ac3899153a790a6f060dc816ff94812e0fd99875

Fixed

ffb401296259cc20eed753bf0f934221df45e32e

Database specific

{
    "versions": [
        {
            "introduced": "4.1"
        },
        {
            "last_affected": "4.1.38"
        },
        {
            "introduced": "4.2"
        },
        {
            "last_affected": "4.2.35"
        },
        {
            "introduced": "4.3"
        },
        {
            "last_affected": "4.3.31"
        },
        {
            "introduced": "4.4"
        },
        {
            "last_affected": "4.4.30"
        },
        {
            "introduced": "4.5"
        },
        {
            "last_affected": "4.5.29"
        },
        {
            "introduced": "4.6"
        },
        {
            "last_affected": "4.6.26"
        },
        {
            "introduced": "4.7"
        },
        {
            "last_affected": "4.7.26"
        },
        {
            "introduced": "4.8"
        },
        {
            "last_affected": "4.8.22"
        },
        {
            "introduced": "4.9"
        },
        {
            "last_affected": "4.9.23"
        },
        {
            "introduced": "5.0"
        },
        {
            "last_affected": "5.0.19"
        },
        {
            "introduced": "5.1"
        },
        {
            "last_affected": "5.1.16"
        },
        {
            "introduced": "5.2"
        },
        {
            "last_affected": "5.2.18"
        },
        {
            "introduced": "5.3"
        },
        {
            "last_affected": "5.3.15"
        },
        {
            "introduced": "5.4"
        },
        {
            "last_affected": "5.4.13"
        },
        {
            "introduced": "5.5"
        },
        {
            "last_affected": "5.5.12"
        },
        {
            "introduced": "5.6"
        },
        {
            "last_affected": "5.6.11"
        },
        {
            "introduced": "5.7"
        },
        {
            "last_affected": "5.7.9"
        },
        {
            "introduced": "5.8"
        },
        {
            "last_affected": "5.8.7"
        },
        {
            "introduced": "5.9"
        },
        {
            "last_affected": "5.9.7"
        },
        {
            "introduced": "6.0"
        },
        {
            "last_affected": "6.0.5"
        },
        {
            "introduced": "6.1"
        },
        {
            "last_affected": "6.1.3"
        },
        {
            "introduced": "6.2"
        },
        {
            "last_affected": "6.2.2"
        },
        {
            "introduced": "6.3"
        },
        {
            "fixed": "6.3.2"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-39999.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "37"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "38"
            }
        ]
    }
]