PT-2023-16937 · WordPress · W4 Post List

Erwan Lr

·

CVE-2023-1371

·

Publicado

2023-04-17

·

Atualizado

2023-04-24

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions W4 Post List WordPress plugin versions prior to 2.4.6
Description The issue arises because the plugin does not properly check access to password-protected posts before displaying their content. This could allow any authenticated users to access these posts.
Recommendations For versions prior to 2.4.6, update to version 2.4.6 or later to resolve the issue.

Exploit

Correção

Missing Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2023-1371

Produtos afetados

W4 Post List