Lucene search
WPScanCVELIST:CVE-2024-0421HistoryFeb 12, 2024 - 4:05 p.m.
CVE-2024-0421 MapPress Maps for WordPress < 2.88.16 - Unauthenticated Arbitrary Private/Draft Post Disclosure
2024-02-1216:05:57
WPScan
www.cve.org
9
mappress
wordpress
arbitrary disclosure
unauthenticated
ajax
security vulnerability
The MapPress Maps for WordPress plugin before 2.88.16 is affected by an IDOR as it does not ensure that posts to be retrieve via an AJAX action is a public map, allowing unauthenticated users to read arbitrary private and draft posts.
CNA Affected
[
{
"vendor": "Unknown",
"product": "MapPress Maps for WordPress",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "2.88.16"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
prion
prion
Code injection
2024-02-12 16:15:00
nvd
nvd
CVE-2024-0421
2024-02-12 16:15:08
wpexploit
wpexploit
wpvulndb
wpvulndb
cve
cve
CVE-2024-0421
2024-02-12 16:15:08