CVE-2023-5692: 
WordPress vulnerability analysis and mitigation

WordPress Core versions up to and including 6.4.3 contain a Sensitive Information Exposure vulnerability via the redirect_guess_404_permalink function. The vulnerability was discovered and disclosed in April 2024, affecting WordPress Core installations. This vulnerability allows unauthenticated attackers to expose the slug of a custom post whose 'publicly_queryable' post status has been set to 'false' (NVD).

The vulnerability exists in the redirect_guess_404_permalink function within WordPress Core. The issue stems from insufficient access control checks when handling post type visibility. The vulnerability has been assigned a CVSS v3.1 base score of 5.3 (Medium), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N (Wordfence).

The vulnerability allows unauthenticated attackers to expose the slugs of custom posts that were intended to be private. This could lead to information disclosure of content that was meant to be hidden from public view (NVD).

The vulnerability can be exploited by unauthenticated attackers remotely, requiring no special privileges or user interaction. The attack complexity is considered low, making it relatively straightforward to exploit (Wordfence).

The issue has been addressed in WordPress Core through a patch that limits the post types searched in redirect_guess_404_permalink() to public, searchable post types. This prevents redirects to 404 pages and the exposure of private post type slugs (WordPress Changeset).