CVE-2023-3371

—

CVSS 3.1

7.5 high

EPSS

<1%p44

Published

Jun 27, 2023 (Jun 27, 2023)

Modified

Jun 17, 2026

Description

The EmbedPress plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded encryption key on the 'lock_content_form_handler' and 'display_password_form' function in versions up to, and including, 3.7.3. This makes it possible for unauthenticated attackers to decrypt and view the password protected content.

Vendors: wpdeveloper
Products: embedpress
Ecosystems: WordPress
Weakness: CWE-321
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.