Lucene search
HistoryDec 26, 2023 - 7:15 p.m.
CVE-2023-6250
bestwebsoft
wordpress
plugin
vulnerability
disclosure
password protected posts
unauthenticated users
meta tag
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
37.0%
The BestWebSoft’s Like & Share WordPress plugin before 2.74 discloses the content of password protected posts to unauthenticated users via a meta tag
Affected configurations
Node
bestwebsoftlike_\&_shareRange<2.74wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| bestwebsoft | like_\&_share | * | cpe:2.3:a:bestwebsoft:like_\&_share:*:*:*:*:*:wordpress:*:* |
Related
prion
prion
Design/Logic Flaw
2023-12-26 19:15:00
wpvulndb
wpvulndb
cve
cve
CVE-2023-6250
2023-12-26 19:15:08
cvelist
cvelist
wpexploit
wpexploit
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
37.0%
Related for NVD:CVE-2023-6250