WordPress core

CVE-2023-39999

Exposure of Sensitive Information to an Unauthorized Actor in WordPress from 6.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.13, from 6.0 through 6.0.5, from 5.9 through 5.9.7, from 5.8 through 5.8.7, from 5.7 through 5.7.9, from 5.6 through 5.6.11, from 5.5 through 5.5.12, from 5.4 through 5.4.13, from 5.3 through 5.3.15, from 5.2 through 5.2.18, from 5.1 through 5.1.16, from 5.0…

Severity: Medium 4.3
Published: 13 Oct 2023
Last changed: 5 Oct 2026
Added to UpHeron: 17 Oct 2026
Fixed in: 6.3.2
Sources: NVD

Affected software

Software Affected versions

Software	Affected versions
WordPressWordPress core · `cpe:a:wordpress:wordpress`	From 6.3 before 6.3.2 From 6.2 up to 6.2.2 From 6.1 up to 6.1.3 From 6.0 up to 6.0.5 All 23 release lines From 4.1 up to 4.1.38 From 4.2 up to 4.2.35 From 4.3 up to 4.3.31 From 4.4 up to 4.4.30 From 4.5 up to 4.5.29 From 4.6 up to 4.6.26 From 4.7 up to 4.7.26 From 4.8 up to 4.8.22 From 4.9 up to 4.9.23 From 5.0 up to 5.0.19 From 5.1 up to 5.1.16 From 5.2 up to 5.2.18 From 5.3 up to 5.3.15 From 5.4 up to 5.4.13 From 5.5 up to 5.5.12 From 5.6 up to 5.6.11 From 5.7 up to 5.7.9 From 5.8 up to 5.8.7 From 5.9 up to 5.9.7 From 6.0 up to 6.0.5 From 6.1 up to 6.1.3 From 6.2 up to 6.2.2 From 6.3 before 6.3.2

WordPressWordPress core · cpe:a:wordpress:wordpress

From 6.3 before 6.3.2
From 6.2 up to 6.2.2
From 6.1 up to 6.1.3
From 6.0 up to 6.0.5

All 23 release lines

From 4.1 up to 4.1.38
From 4.2 up to 4.2.35
From 4.3 up to 4.3.31
From 4.4 up to 4.4.30
From 4.5 up to 4.5.29
From 4.6 up to 4.6.26
From 4.7 up to 4.7.26
From 4.8 up to 4.8.22
From 4.9 up to 4.9.23
From 5.0 up to 5.0.19
From 5.1 up to 5.1.16
From 5.2 up to 5.2.18
From 5.3 up to 5.3.15
From 5.4 up to 5.4.13
From 5.5 up to 5.5.12
From 5.6 up to 5.6.11
From 5.7 up to 5.7.9
From 5.8 up to 5.8.7
From 5.9 up to 5.9.7
From 6.0 up to 6.0.5
From 6.1 up to 6.1.3
From 6.2 up to 6.2.2
From 6.3 before 6.3.2

References

NVD https://nvd.nist.gov/vuln/detail/CVE-2023-39999
CVE.org https://www.cve.org/CVERecord?id=CVE-2023-39999