CVE-2023-6962: 
WordPress vulnerability analysis and mitigation

The WP Meta SEO plugin for WordPress contains a Sensitive Information Exposure vulnerability (CVE-2023-6962) affecting all versions up to and including 4.5.12. The vulnerability allows unauthenticated attackers to access potentially sensitive information through the meta description of password-protected posts (NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 5.3 (Medium) with the following vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. This indicates that the vulnerability can be exploited over the network, requires low attack complexity, needs no privileges, requires no user interaction, has unchanged scope, and can result in low confidentiality impact with no impact on integrity or availability (NVD).

The vulnerability allows unauthorized access to potentially sensitive information contained within password-protected posts through their meta descriptions. This could lead to the exposure of confidential data that was intended to be protected behind password authentication (NVD).

The vulnerability can be exploited by unauthenticated attackers remotely without requiring any special privileges or user interaction. The low attack complexity rating suggests that the vulnerability is relatively straightforward to exploit (NVD).

Users are advised to update to version 4.5.13 or later of the WP Meta SEO plugin, which contains fixes for this vulnerability (NVD).