Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-19810
HistoryFeb 10, 2022 - 12:00 a.m.

WordPress Document Embedder plugin title enumeration vulnerability

2022-02-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
wordpress
document embedder
plugin
title enumeration
vulnerability
php
blogging platform
ajax operation
authenticated attacker
private post
draft post
version 1.7.9

EPSS

0.001

Percentile

24.8%

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. Document Embedder WordPress plugin prior to version 1.7.9 is vulnerable to a title enumeration vulnerability, which stems from the fact that the plugin includes an AJAX operation endpoint that can be exploited by an authenticated attacker to enumerate Any private and draft post title.

EPSS

0.001

Percentile

24.8%