CVE-2023-2916 InfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information Exposure
Authenticated subscribers can expose sensitive configuration data in unconfigured InfiniteWP Client plugins, potentially enabling privilege escalation via remote management.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-2916?
CVE-2023-2916 is a high-severity vulnerability in revmakx InfiniteWP Client, published on 15 Aug 2023. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The InfiniteWP Client plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.11.1 via the 'admin_notice' function. This can allow authenticated attackers with subscriber-level permissions or above to extract sensitive data including configuration. It can only be exploited if the plugin has not been configured yet. If combined with another arbitrary plugin installation and activation vulnerability, it may be possible to connect a site to InfiniteWP which would make remote management possible and allow for elevation of privileges.
Which versions are affected by CVE-2023-2916?
It affects 1 product.
Products include Revmakx Infinitewp Client.
How do I fix CVE-2023-2916?
No fix has been published for CVE-2023-2916 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-2916 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-2916 exists.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in revmakx InfiniteWP Client
- CVE-2020-8772 Missing authorization in n/a
- CVE-2016-15004 InfiniteWP Client Plugin injection
- CVE-2023-6565 InfiniteWP Client <= 1.12.3 - Unauthenticated Sensitive Information Exposure
- CVE-2024-10585 InfiniteWP Client <= 1.13.0 - Unauthenticated Limited Directory Traversal to Arbitrary .txt File Reading
Sources
Also known as GHSA-jm74-36vr-69gx.