Back to Database
Status published
Unknown
CVE-2022-43504
Improper authentication vulnerability in WordPress versions prior to 6.0.3 allows...
Vulnerability Description
Improper authentication vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to obtain the email address of the user who posted a blog using the WordPress Post by Email Feature. The developer also provides new patched releases for all versions since 3.7.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-43504
Credits & Attribution
No credits recorded in the NVD database.
References
More from WordPress.org
View All →CVE-2025-64253
WordPress Health Check & Troubleshooting plugin <= 1.7.1 - Path Traversal vulnerability
Medium
4.9
CVE-2023-39999
WordPress < 6.3.2 is vulnerable to Broken Access Control
Medium
4.3
CVE-2023-38000
Auth. Stored Cross-Site Scripting (XSS) vulnerability in WordPress core and Gutenberg plugin via Navigation Links Block
Medium
6.5
CVE-2022-43500
Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows...
Unknown
0
CVE-2022-43497
Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows...
Unknown
0
Affected Vendor
WordPress.org
View all reports →Affected Software
WordPress
Vulnerable Versions:
versions prior to 6.0.3
Timeline
Official Publish:
December 5th, 2022
Last Modified:
April 24th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.