VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Feb 29, 2024· Updated Apr 8, 2026

CVE-2023-6565

CVE-2023-6565

Description

The InfiniteWP Client plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.12.3 via the multi-call backup option. This makes it possible for unauthenticated attackers to extract sensitive data from a temporary SQL file via repeated GET requests during the limited time window of the backup process.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Revmakx/Infinitewp Client2 versions
    cpe:2.3:a:revmakx:infinitewp_client:*:*:*:*:*:wordpress:*:*+ 1 more
    • cpe:2.3:a:revmakx:infinitewp_client:*:*:*:*:*:wordpress:*:*range: <1.12.3.1
    • (no CPE)range: <=1.12.3

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.