Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-101722
HistoryDec 18, 2021 - 12:00 a.m.

WordPress Page/Post Content Shortcode plugin authorization issue vulnerability

2021-12-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
wordpress
page/post content
shortcode
authorization
vulnerability
authentication
access
posts
pages

EPSS

0.001

Percentile

24.8%

WordPress is the WordPress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. WordPress Page/Post Content Shortcode plugin in and prior versions is vulnerable to an authorization issue that stems from a lack of authentication measures or insufficient authentication strength in the network system or product. An attacker could use this vulnerability to access draft/private/password protected/spam posts/pages that should not be allowed, including posts created by other users such as administrators and editors.

EPSS

0.001

Percentile

24.8%