Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fxfx-g3pr-8p9r

Опубликовано: 15 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

The DeMomentSomTres WordPress Export Posts With Images WordPress plugin through 20220825 does not check authorization of requests to export the blog data, allowing any logged in user, such as subscribers to export the contents of the blog, including restricted and unpublished posts, as well as passwords of protected posts.

The DeMomentSomTres WordPress Export Posts With Images WordPress plugin through 20220825 does not check authorization of requests to export the blog data, allowing any logged in user, such as subscribers to export the contents of the blog, including restricted and unpublished posts, as well as passwords of protected posts.

EPSS

Процентиль: 44%
0.0022
Низкий

8.1 High

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 8.1
nvd
около 2 лет назад

The DeMomentSomTres WordPress Export Posts With Images WordPress plugin through 20220825 does not check authorization of requests to export the blog data, allowing any logged in user, such as subscribers to export the contents of the blog, including restricted and unpublished posts, as well as passwords of protected posts.

EPSS

Процентиль: 44%
0.0022
Низкий

8.1 High

CVSS3

Дефекты

CWE-862