CVE-2019-14365

CVE-2019-14365 describes a critical information disclosure vulnerability in the Intercom plugin for WordPress, versions through 1.2.1. This flaw allows an unauthenticated attacker to retrieve a Slack Access Token directly from the plugin's source code. With this token, an attacker can gain extensive access to the victim's Slack workspace, including channel and member information. While rated as high severity with a CVSS score of 7.5 due to its network-based attack vector and low complexity, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.