Technical impact
The vulnerability allows the injection of sensitive information into sent data, enabling an attacker to retrieve embedded confidential data. The weakness is identified as CWE-201, which typifies unintended exposure of data that should remain confidential. A successful exploitation can lead to the disclosure of private configuration or user information, potentially compromising the integrity and confidentiality of the host system and its data.
Affected Systems
Syed Balkhi’s All In One SEO Pack plugin for WordPress is affected. Versions from the earliest releases up through 4.8.6.1 are vulnerable, with the issue documented for all releases prior to and including 4.8.6.1.
Risk and Exploitability
The CVSS score of 6.5 indicates a moderate severity vulnerability. The EPSS score of < 1% shows an exceptionally low probability of exploitation in the wild, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is through normal interactions with the plugin within a WordPress site, such as reviewing or creating content that triggers the plugin’s data handling routines. An attacker would need to exploit the plugin’s data processing path to read the sensitive data that is inadvertently included in outgoing content.
