Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-54901
HistoryJul 27, 2022 - 12:00 a.m.

WordPress plugin Shareaholic信息泄露漏洞

2022-07-2700:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
wordpress
shareaholic
information disclosure
vulnerability
authorization checks
unauthenticated users
php
mysql

EPSS

0.002

Percentile

56.3%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress plugin is an application plug-in. An information disclosure vulnerability exists in versions of the WordPress plugin Shareaholic prior to 9.7.6, which stems from a failure to properly perform authorization checks, allowing unauthenticated users to retrieve various information. No details of the vulnerability are currently available.

EPSS

0.002

Percentile

56.3%