CVE-2023-28421

CVE-2023-28421 describes a sensitive information exposure vulnerability in the Winwar Media WordPress Email Marketing Plugin – WP Email Capture, affecting versions up to and including 3.10. This high-severity vulnerability (CVSS 7.5) can be exploited remotely without authentication or user interaction, potentially leading to the disclosure of confidential data. While the vulnerability has a high CVSS score and a moderate FAUCET Risk Score, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.