VULNERABILITY INTELLIGENCE

CVE-2022-34867

CVSS score7.3 HIGH
EPSS probability0.79%
CISA KEVNot currently listed
Published2022-09-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Description

Unauthenticated Sensitive Information Disclosure vulnerability in WP Libre Form 2 plugin <= 2.0.8 at WordPress allows attackers to list and delete submissions. Affects only versions from 2.0.0 to 2.0.8.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
  • CWE-668: Exposure of Resource to Wrong Sphere

Primary references