CVE-2023-39999

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-39999
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-39999.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-39999
Aliases
Downstream
Published
2023-10-13T11:31:16.977Z
Modified
2026-07-15T02:04:26.510571633Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
WordPress < 6.3.2 is vulnerable to Broken Access Control
Details

Exposure of Sensitive Information to an Unauthorized Actor in WordPress from 6.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.13, from 6.0 through 6.0.5, from 5.9 through 5.9.7, from 5.8 through 5.8.7, from 5.7 through 5.7.9, from 5.6 through 5.6.11, from 5.5 through 5.5.12, from 5.4 through 5.4.13, from 5.3 through 5.3.15, from 5.2 through 5.2.18, from 5.1 through 5.1.16, from 5.0 through 5.0.19, from 4.9 through 4.9.23, from 4.8 through 4.8.22, from 4.7 through 4.7.26, from 4.6 through 4.6.26, from 4.5 through 4.5.29, from 4.4 through 4.4.30, from 4.3 through 4.3.31, from 4.2 through 4.2.35, from 4.1 through 4.1.38.

Database specific 
{
    "cna_assigner": "Patchstack",
    "cwe_ids": [
        "CWE-200"
    ],
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "6.3"
                },
                {
                    "last_affected": "6.3.1"
                },
                {
                    "introduced": "6.2"
                },
                {
                    "last_affected": "6.2.2"
                },
                {
                    "introduced": "6.1"
                },
                {
                    "last_affected": "6.13"
                },
                {
                    "introduced": "6.0"
                },
                {
                    "last_affected": "6.0.5"
                },
                {
                    "introduced": "5.9"
                },
                {
                    "last_affected": "5.9.7"
                },
                {
                    "introduced": "5.8"
                },
                {
                    "last_affected": "5.8.7"
                },
                {
                    "introduced": "5.7"
                },
                {
                    "last_affected": "5.7.9"
                },
                {
                    "introduced": "5.6"
                },
                {
                    "last_affected": "5.6.11"
                },
                {
                    "introduced": "5.5"
                },
                {
                    "last_affected": "5.5.12"
                },
                {
                    "introduced": "5.4"
                },
                {
                    "last_affected": "5.4.13"
                },
                {
                    "introduced": "5.3"
                },
                {
                    "last_affected": "5.3.15"
                },
                {
                    "introduced": "5.2"
                },
                {
                    "last_affected": "5.2.18"
                },
                {
                    "introduced": "5.1"
                },
                {
                    "last_affected": "5.1.16"
                },
                {
                    "introduced": "5.0"
                },
                {
                    "last_affected": "5.0.19"
                },
                {
                    "introduced": "4.9"
                },
                {
                    "last_affected": "4.9.23"
                },
                {
                    "introduced": "4.8"
                },
                {
                    "last_affected": "4.8.22"
                },
                {
                    "introduced": "4.7"
                },
                {
                    "last_affected": "4.7.26"
                },
                {
                    "introduced": "4.6"
                },
                {
                    "last_affected": "4.6.26"
                },
                {
                    "introduced": "4.5"
                },
                {
                    "last_affected": "4.5.29"
                },
                {
                    "introduced": "4.4"
                },
                {
                    "last_affected": "4.4.30"
                },
                {
                    "introduced": "4.3"
                },
                {
                    "last_affected": "4.3.31"
                },
                {
                    "introduced": "4.2"
                },
                {
                    "last_affected": "4.2.35"
                },
                {
                    "introduced": "4.1"
                },
                {
                    "last_affected": "4.1.38"
                }
            ]
        },
        {
            "source": "DESCRIPTION",
            "extracted_events": [
                {
                    "introduced": "6.3"
                },
                {
                    "fixed": "6.3.1"
                },
                {
                    "introduced": "6.2"
                },
                {
                    "fixed": "6.2.2"
                },
                {
                    "introduced": "6.1"
                },
                {
                    "fixed": "6.13"
                },
                {
                    "introduced": "6.0"
                },
                {
                    "fixed": "6.0.5"
                },
                {
                    "introduced": "5.9"
                },
                {
                    "fixed": "5.9.7"
                },
                {
                    "introduced": "5.8"
                },
                {
                    "fixed": "5.8.7"
                },
                {
                    "introduced": "5.7"
                },
                {
                    "fixed": "5.7.9"
                },
                {
                    "introduced": "5.6"
                },
                {
                    "fixed": "5.6.11"
                },
                {
                    "introduced": "5.5"
                },
                {
                    "fixed": "5.5.12"
                },
                {
                    "introduced": "5.4"
                },
                {
                    "fixed": "5.4.13"
                },
                {
                    "introduced": "5.3"
                },
                {
                    "fixed": "5.3.15"
                },
                {
                    "introduced": "5.2"
                },
                {
                    "fixed": "5.2.18"
                },
                {
                    "introduced": "5.1"
                },
                {
                    "fixed": "5.1.16"
                },
                {
                    "introduced": "5.0"
                },
                {
                    "fixed": "5.0.19"
                },
                {
                    "introduced": "4.9"
                },
                {
                    "fixed": "4.9.23"
                },
                {
                    "introduced": "4.8"
                },
                {
                    "fixed": "4.8.22"
                },
                {
                    "introduced": "4.7"
                },
                {
                    "fixed": "4.7.26"
                },
                {
                    "introduced": "4.6"
                },
                {
                    "fixed": "4.6.26"
                },
                {
                    "introduced": "4.5"
                },
                {
                    "fixed": "4.5.29"
                },
                {
                    "introduced": "4.4"
                },
                {
                    "fixed": "4.4.30"
                },
                {
                    "introduced": "4.3"
                },
                {
                    "fixed": "4.3.31"
                },
                {
                    "introduced": "4.2"
                },
                {
                    "fixed": "4.2.35"
                },
                {
                    "introduced": "4.1"
                },
                {
                    "fixed": "4.1.38"
                }
            ]
        }
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39999.json"
}
References

Affected packages

Git / github.com/wordpress/wordpress

Affected ranges

Type
GIT
Repo
https://github.com/wordpress/wordpress
Events
Introduced
e5e791f331d371ad6262c1893d84f5f2b6c26464
Last affected
206b164e27d3db60ddf5c0b5562b9f92e4fc6fe6
Introduced
87bf150016e042bc3e21f2f1cb9de44042b8cdb1
Last affected
85ae754b8902916c967ccee1d8040e0fb51cdd8f
Introduced
b57f3aa5f00a127f209eff74b78787dd3fd5ed4d
Last affected
02242f4554cbdaa345b4545eb0adad7179f1663f
Introduced
f6a29831c76d2dbe82e9ae673539f910654c58a4
Last affected
2e33df0588ff16f2f932717eddd35804efb8bc85
Introduced
e3aafee3f2bc07e09bf79389f20ea3db731466c3
Last affected
c129defefef81abe776424ddf459f3b04b7338db
Introduced
fe47e6139dbfc0f0c9ce0d79da77926b5fceaa77
Last affected
c12fc446e7d264326cdd77b62d66f3b7ba99379d
Introduced
14247ee4302378d292863865c643abe99bbfe3c7
Last affected
eb5a504bda5fac38796af50725e7f923bc1ad02e
Introduced
06fa4161aa74619239cf27017d124081c825684a
Last affected
7e6cddf8dd03933e0f0f5b44b6c89bec3843e4c7
Introduced
29ffbff370968ae48a1b7a34e35c8b8e75cf0f91
Last affected
dde4da7b797c6f3184834075f3c472a530fe03dd
Introduced
491c67be12ca8a9fe37ae38307ba7e298c976ec3
Last affected
0cac57854d9be31fae947b1ac07e9a6075974264
Introduced
c33464a4554cff8a082bc353d9226d8104b80d2b
Last affected
e6664bb77aa10b2fde05fe5d9b0631d43656c7b6
Introduced
6fe64752be3260f2a47f38e68c2cb77400e5a0c9
Last affected
95b6583c2bca8bfbbc0067f938057c60b2578b58
Introduced
50dc0ca5bb332c895f0f39fe4e6ee1e4a43e06dc
Last affected
18a1be2684e0cbd8c7ebebecfb9ca29b13d7d607
Introduced
9ff4499281663b0c772787fd4a60538288f842e9
Last affected
64da002d598dda6b682cb595bb317008253695b8
Introduced
537fd931bc02e6e934a2d774422b897871aa87ad
Last affected
efb471e7258d930659983062c5759fcbcab01867
Introduced
965fcddcf68cf4fd122ae24b992e242dfea1d773
Last affected
2876d269e6e74858e82dac0bea7cd86ea5a870ec
Introduced
058f9903676a7efaee534a682df0a2a8b87574d8
Last affected
61abfb66115c809782419ab4d5f491a62e08e345
Introduced
50caeb6e61ad0c49d2c7e1d6d5115047a011f590
Last affected
61d5032484ddbbd548b45f293245b3dc0e791ceb
Introduced
73157386d069425c5e6ea7c4fc0122e8a9b58a7b
Last affected
1fd6a06b5d9d09f5ace1f796b279cde5e254a734
Introduced
cc101b64012b16d087780657a2b828ccd7794a63
Last affected
b89fe813fed950c35894aa826c686fbf7487f062
Introduced
6c5d5b5dcb9712bfc400b09cb6627e42898527af
Last affected
61c8a5f2bab314a16cc5c8eb1064b2975129e9d6
Introduced
17e2eff4aa3beb2802cbec12b6f08e2fbf69893d
Last affected
9e0f2faa28f1aa04a69e0b4eaa410a38adcd2e1e
Introduced
ac3899153a790a6f060dc816ff94812e0fd99875
Fixed
ffb401296259cc20eed753bf0f934221df45e32e
Database specific 
{
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.1"
        },
        {
            "last_affected": "4.1.38"
        },
        {
            "introduced": "4.2"
        },
        {
            "last_affected": "4.2.35"
        },
        {
            "introduced": "4.3"
        },
        {
            "last_affected": "4.3.31"
        },
        {
            "introduced": "4.4"
        },
        {
            "last_affected": "4.4.30"
        },
        {
            "introduced": "4.5"
        },
        {
            "last_affected": "4.5.29"
        },
        {
            "introduced": "4.6"
        },
        {
            "last_affected": "4.6.26"
        },
        {
            "introduced": "4.7"
        },
        {
            "last_affected": "4.7.26"
        },
        {
            "introduced": "4.8"
        },
        {
            "last_affected": "4.8.22"
        },
        {
            "introduced": "4.9"
        },
        {
            "last_affected": "4.9.23"
        },
        {
            "introduced": "5.0"
        },
        {
            "last_affected": "5.0.19"
        },
        {
            "introduced": "5.1"
        },
        {
            "last_affected": "5.1.16"
        },
        {
            "introduced": "5.2"
        },
        {
            "last_affected": "5.2.18"
        },
        {
            "introduced": "5.3"
        },
        {
            "last_affected": "5.3.15"
        },
        {
            "introduced": "5.4"
        },
        {
            "last_affected": "5.4.13"
        },
        {
            "introduced": "5.5"
        },
        {
            "last_affected": "5.5.12"
        },
        {
            "introduced": "5.6"
        },
        {
            "last_affected": "5.6.11"
        },
        {
            "introduced": "5.7"
        },
        {
            "last_affected": "5.7.9"
        },
        {
            "introduced": "5.8"
        },
        {
            "last_affected": "5.8.7"
        },
        {
            "introduced": "5.9"
        },
        {
            "last_affected": "5.9.7"
        },
        {
            "introduced": "6.0"
        },
        {
            "last_affected": "6.0.5"
        },
        {
            "introduced": "6.1"
        },
        {
            "last_affected": "6.1.3"
        },
        {
            "introduced": "6.2"
        },
        {
            "last_affected": "6.2.2"
        },
        {
            "introduced": "6.3"
        },
        {
            "fixed": "6.3.2"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-39999.json"

Git / github.com/wordpress/wordpress-develop

Affected ranges

Type
GIT
Repo
https://github.com/wordpress/wordpress-develop
Events
Introduced
470529c2bf211450e91f01ceadaa9fc97a2b4031
Last affected
a2931a9d83cd9148f5b55bff1e329d63d1e2881b
Introduced
7b07c0ccc7453ce057e009ffa65f12a02ce7d2ee
Last affected
7b941f875af101dba779c9a70cf5e48fed422577
Introduced
ec8826ed50f8ce0eea39900eeeba09a9d621f00e
Last affected
c353b6e5b24f7c3f19a856692b9727bd15411197
Introduced
b5f6ca5af6e29fe5df7a65d512b177fa465cfa2e
Last affected
8b7a907fc8c753e2546b06d9ef5e30d9f2ffefa4
Introduced
7acf453090c10537e6f41fc4cf2608d7bbcce8ca
Last affected
5231e3557e490141da093d80931cbddef86d70f6
Introduced
7c76a1b79e21176b176b5b6d6b03151f8eea4b55
Last affected
a5dacdaf8ce43992be538bfe6421558bf8ac0c6a
Introduced
efa83f48bd4ebd066e5efc94b9feefe50e7925a2
Last affected
bbdcbcfb6604a39adf28abe86be2905a3b508c88
Introduced
2ac9b801ef5c18accf223b093529dacfcf809133
Last affected
b6bf7e716ffb914620302a5bc0e988a1e69aff5e
Introduced
31f7ece8503f0dc6ef1df2473ae3f3d352973e12
Last affected
a1f53bae066d6df3e661a5b345be046752f0d313
Introduced
b3bf6266acd61682bc654845f621b4426645e324
Last affected
eb65583c140b8c44e2ec040b3778b6291a6fd41c
Introduced
5aa596fee9bf6ea7f0ccc2ed51b16c0f2f04076b
Last affected
ba8f29e71e43dc46b6ea6be55384f3ffa64917f2
Introduced
1cf3888655c0eb8b0b0539834ad67db5920190d7
Last affected
8fc4b865610d0342c10a7c55f0e137995d37f2a3
Introduced
d05f0a86b23e37b9d97acd9317ff3fd661d64dea
Last affected
c6ad96c4114c1109bcd6729ebc7f942df9c2c07d
Introduced
e0bedd676512ace4c5586337c072037298315f79
Last affected
d3cd96d0a7b4bf5033ab961fe1511d41069ccc91
Introduced
944a787b8071d3a27f4ac68980c21ed6137db91d
Last affected
7a09b68d1a7b452beb22e377d07ad4ad02408dc9
Introduced
96a6969aab5f0b9362cbc984af230bdfc93022e8
Last affected
e42312d0a73359395d22131d61c4a1caf97d99e0
Introduced
895d6a691d7ccdfe80cdf999bc0c8a78d11ad55a
Last affected
30f111dd26bb3b34b66abea220065462180ab33c
Introduced
4b54a6c2c9a3be775cc6dda66ed207998b068c8f
Last affected
44171ce3d4b8ad4123606240c002d93cc16eb2f3
Introduced
b83a8be65054cd890e24c7c1416ebbb39aeb4c09
Last affected
ec7fd4b5a580f97291934dca58df6fc5c6bcd7b4
Introduced
1c0a2efa5eac05dfd3b7d2b9cfe68e02da55b966
Last affected
13046ba47ade670d59542b3ef2570b1d85900910
Introduced
e33c9f3203961a823ec8410fc1481f6c87b4e3db
Last affected
44daad0aa31ba543ee01a909ee81a4b177a000e3
Introduced
b829903bb0104bfeccc7623946a25cb7ccda1dea
Last affected
52226e0308918474a0ac4ab8017e091ed3ae692a
Introduced
4a6363076129378869f8742ef00a39a7421e6f29
Fixed
e8676f6226fb01cd17222c771717969f42e73505
Database specific 
{
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.1"
        },
        {
            "last_affected": "4.1.38"
        },
        {
            "introduced": "4.2"
        },
        {
            "last_affected": "4.2.35"
        },
        {
            "introduced": "4.3"
        },
        {
            "last_affected": "4.3.31"
        },
        {
            "introduced": "4.4"
        },
        {
            "last_affected": "4.4.30"
        },
        {
            "introduced": "4.5"
        },
        {
            "last_affected": "4.5.29"
        },
        {
            "introduced": "4.6"
        },
        {
            "last_affected": "4.6.26"
        },
        {
            "introduced": "4.7"
        },
        {
            "last_affected": "4.7.26"
        },
        {
            "introduced": "4.8"
        },
        {
            "last_affected": "4.8.22"
        },
        {
            "introduced": "4.9"
        },
        {
            "last_affected": "4.9.23"
        },
        {
            "introduced": "5.0"
        },
        {
            "last_affected": "5.0.19"
        },
        {
            "introduced": "5.1"
        },
        {
            "last_affected": "5.1.16"
        },
        {
            "introduced": "5.2"
        },
        {
            "last_affected": "5.2.18"
        },
        {
            "introduced": "5.3"
        },
        {
            "last_affected": "5.3.15"
        },
        {
            "introduced": "5.4"
        },
        {
            "last_affected": "5.4.13"
        },
        {
            "introduced": "5.5"
        },
        {
            "last_affected": "5.5.12"
        },
        {
            "introduced": "5.6"
        },
        {
            "last_affected": "5.6.11"
        },
        {
            "introduced": "5.7"
        },
        {
            "last_affected": "5.7.9"
        },
        {
            "introduced": "5.8"
        },
        {
            "last_affected": "5.8.7"
        },
        {
            "introduced": "5.9"
        },
        {
            "last_affected": "5.9.7"
        },
        {
            "introduced": "6.0"
        },
        {
            "last_affected": "6.0.5"
        },
        {
            "introduced": "6.1"
        },
        {
            "last_affected": "6.1.3"
        },
        {
            "introduced": "6.2"
        },
        {
            "last_affected": "6.2.2"
        },
        {
            "introduced": "6.3"
        },
        {
            "fixed": "6.3.2"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-39999.json"