CVE-2020-9043

CVE-2020-9043 describes a critical information disclosure vulnerability in the wpCentral plugin for WordPress, affecting versions prior to 1.5.1. This flaw allows an authenticated attacker to disclose the connection key, which could lead to unauthorized access and control over the WordPress site. Rated with a CVSS score of 8.8 (High), the vulnerability is easily exploitable over the network with low privileges and no user interaction, potentially resulting in high impact to confidentiality, integrity, and availability. Its EPSS score of 0.29554 indicates a higher-than-average probability of exploitation. While not listed in CISA's KEV catalog, exploit intelligence shows the existence of Nuclei templates for this vulnerability, suggesting readily available tools for exploitation. Despite this, there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.