PT-2024-33811 · WordPress · Wpupper Share Buttons
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
WPUpper Share Buttons plugin for WordPress versions up to, and including, 3.43
Description:
The issue allows unauthorized access to data when preparing sharing links for posts and pages, making it possible for unauthenticated attackers to obtain the contents of password protected posts and pages.
Recommendations:
For versions up to, and including, 3.43, update to a version higher than 3.43 to resolve the issue.
At the moment, there is no information about other mitigation measures.
Fix
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Wpupper Share Buttons