Unrated severityNVD Advisory· Published Dec 5, 2022· Updated Apr 24, 2025
CVE-2022-43504
CVE-2022-43504
Description
Improper authentication vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to obtain the email address of the user who posted a blog using the WordPress Post by Email Feature. The developer also provides new patched releases for all versions since 3.7.
Affected products
3- osv-coords2 versions
< 3.7.40+ 1 more
- (no CPE)range: < 3.7.40
- (no CPE)range: < 3.7.40
- WordPress.org/WordPressv5Range: versions prior to 6.0.3
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3News mentions
0No linked articles in our index yet.