PT-2023-30246
CVE-2023-4686
·
Publicado
2023-11-22
·
Atualizado
2023-11-27
Descrição por
CVSS 3.1
4.3
MédiaMétricasAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
WP Customer Reviews plugin for WordPress versions up to and including 3.6.6
Description
The issue allows authenticated attackers to extract sensitive data, including post titles and slugs of protected and trashed posts and pages, as well as other post types like galleries, via the
ajax enabled posts function.Recommendations
For WP Customer Reviews plugin for WordPress versions up to and including 3.6.6, consider disabling the
ajax enabled posts function as a temporary workaround until a patch is available.Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾