Exploit for Exposure of Resource to Wrong Sphere in Revmakx Infinitewp Client CVE-2023-2916

Name: Exploit for Exposure of Resource to Wrong Sphere in Revmakx Infinitewp Client CVE-2023-2916
Rating: 5 (515 reviews)

2023-08-15 | CVSS 7.5

## https://sploitus.com/exploit?id=B521F285-F948-5FF2-BA0E-026607840DE2
# CVE-2023-2916
CVE-2023-2916 PoC
The InfiniteWP Client plugin for WordPress, in versions up to and including 1.11.1, is vulnerable to a Sensitive Information Exposure flaw. This vulnerability allows authenticated attackers with subscriber-level permissions or above to extract sensitive data, including configuration details. Exploitation of this vulnerability is only possible if the plugin has not been configured previously. When combined with another arbitrary plugin installation and activation vulnerability, it may lead to remote management of the site and potential elevation of privileges.