Логотип exploitDog
bind:CVE-2024-0881
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-0881

Количество 2

Количество 2

nvd логотип

CVE-2024-0881

почти 2 года назад

The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel WordPress plugin before 2.2.76 does not have proper authorization, resulting in password protected posts to be displayed in the result of some unauthenticated AJAX actions, allowing unauthenticated users to read such posts

CVSS3: 5.4
EPSS: Средний
github логотип

GHSA-73jw-m44p-r46h

почти 2 года назад

The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel WordPress plugin before 2.2.76 does not prevent password protected posts from being displayed in the result of some unauthenticated AJAX actions, allowing unauthenticated users to read such posts

CVSS3: 5.4
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-0881

The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel WordPress plugin before 2.2.76 does not have proper authorization, resulting in password protected posts to be displayed in the result of some unauthenticated AJAX actions, allowing unauthenticated users to read such posts

CVSS3: 5.4
13%
Средний
почти 2 года назад
github логотип
GHSA-73jw-m44p-r46h

The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel WordPress plugin before 2.2.76 does not prevent password protected posts from being displayed in the result of some unauthenticated AJAX actions, allowing unauthenticated users to read such posts

CVSS3: 5.4
13%
Средний
почти 2 года назад

Уязвимостей на страницу