Логотип exploitDog
bind:CVE-2024-1564
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-1564

Количество 2

Количество 2

nvd логотип

CVE-2024-1564

почти 2 года назад

The wp-schema-pro WordPress plugin before 2.7.16 does not validate post access allowing a contributor user to access custom fields on any post regardless of post type or status via a shortcode

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-p8fm-626m-mf8v

почти 2 года назад

The wp-schema-pro WordPress plugin before 2.7.16 does not validate post access allowing a contributor user to access custom fields on any post regardless of post type or status via a shortcode

CVSS3: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-1564

The wp-schema-pro WordPress plugin before 2.7.16 does not validate post access allowing a contributor user to access custom fields on any post regardless of post type or status via a shortcode

CVSS3: 4.3
0%
Низкий
почти 2 года назад
github логотип
GHSA-p8fm-626m-mf8v

The wp-schema-pro WordPress plugin before 2.7.16 does not validate post access allowing a contributor user to access custom fields on any post regardless of post type or status via a shortcode

CVSS3: 4.3
0%
Низкий
почти 2 года назад

Уязвимостей на страницу