CVE-2022-43504

Published: Dec 5, 2022Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Improper authentication vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to obtain the email address of the user who posted a blog using the WordPress Post by Email Feature. The developer also provides new patched releases for all versions since 3.7.

Affected (24)

Products: Wordpress: Wordpress

Wordpress

1 product

Wordpress

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Wordpress Wordpress	Before 3.7.40
Wordpress Wordpress	From 3.8 to 3.8.40
Wordpress Wordpress	From 3.9 to 3.9.39
Wordpress Wordpress	From 4.0 to 4.0.37
Wordpress Wordpress	From 4.1 to 4.1.37
Wordpress Wordpress	From 4.2 to 4.2.34
Wordpress Wordpress	From 4.3 to 4.3.30
Wordpress Wordpress	From 4.4 to 4.4.29
Wordpress Wordpress	From 4.5 to 4.5.28
Wordpress Wordpress	From 4.6 to 4.6.25
Wordpress Wordpress	From 4.7 to 4.7.25
Wordpress Wordpress	From 4.8 to 4.8.21
Wordpress Wordpress	From 4.9 to 4.9.22
Wordpress Wordpress	From 5.0 to 5.0.18
Wordpress Wordpress	From 5.1 to 5.1.15
Wordpress Wordpress	From 5.2 to 5.2.17
Wordpress Wordpress	From 5.3 to 5.3.14
Wordpress Wordpress	From 5.4 to 5.4.12
Wordpress Wordpress	From 5.5 to 5.5.11
Wordpress Wordpress	From 5.6 to 5.6.10
Wordpress Wordpress	From 5.7 to 5.7.8
Wordpress Wordpress	From 5.8 to 5.8.6
Wordpress Wordpress	From 5.9 to 5.9.5
Wordpress Wordpress	From 6.0 to 6.0.3