PT-2023-30246
CVE-2023-4686
·
تاريخ النشر
2023-11-22
·
تاريخ التحديث
2023-11-27
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
WP Customer Reviews plugin for WordPress versions up to and including 3.6.6
Description
The issue allows authenticated attackers to extract sensitive data, including post titles and slugs of protected and trashed posts and pages, as well as other post types like galleries, via the
ajax enabled posts function.Recommendations
For WP Customer Reviews plugin for WordPress versions up to and including 3.6.6, consider disabling the
ajax enabled posts function as a temporary workaround until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾