Lucene search
PRIOn knowledge basePRION:CVE-2024-0680HistoryFeb 28, 2024 - 9:15 a.m.
Information disclosure
2024-02-2809:15:00
PRIOn knowledge base
www.prio-n.com
5
wp private content plus
wordpress
vulnerability
information disclosure
rest api
unauthenticated attackers
protected posts
The WP Private Content Plus plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 3.6. This is due to the plugin not properly restricting access to posts via the REST API when a page has been made private. This makes it possible for unauthenticated attackers to view protected posts.
Related
cvelist
cvelist
CVE-2024-0680
2024-02-28 08:33:06
cve
cve
CVE-2024-0680
2024-02-28 09:15:41
nvd
nvd
CVE-2024-0680
2024-02-28 09:15:41
wpvulndb
wpvulndb
WP Private Content Plus <= 3.6 - Unauthenticated Protected Post Access
2024-02-28 00:00:00
wordfence
wordfence