What is CVE-2023-0443?

CVE-2023-0443 is a medium-severity vulnerability in Wpvibes Anywhere Elementor, classified under CWE-200 INFORMATION EXPOSURE. CVSS score: 5.3/10. Published 2023-05-30.

How severe is CVE-2023-0443?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Is CVE-2023-0443 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Wpvibes Anywhere Elementor

CVE-2023-0443

The AnyWhere Elementor WordPress plugin before 1.2.8 discloses a Freemius Secret Key which could be used by an attacker to purchase the pro subscription using test credit card numbers without actually paying the amount. Such key has been revoked.

EPSS: 0.006 (46.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Wpvibes Anywhere_elementor
Unknown Anywhere Elementor — versions 1.2.5

Public proof-of-concept exploits

20142995/nuclei-templates

References

contact@wpscan.com (Exploit, technical-description, exploit, vdb-entry)

Frequently asked questions

What is CVE-2023-0443?: CVE-2023-0443 is a medium-severity vulnerability in Wpvibes Anywhere Elementor, classified under CWE-200 INFORMATION EXPOSURE. CVSS score: 5.3/10. Published 2023-05-30.
How severe is CVE-2023-0443?: Medium severity. CVSS v3 base score is 5.3 out of 10.
Is CVE-2023-0443 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.