Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2021/12/13 10:41 a.m.27 views

CVE-2021-24845 Improved Include Page <= 1.2 - Contributor+ Arbitrary Posts/Pages Access

The Improved Include Page WordPress plugin through 1.2 allows passing shortcode attributes with posttype & poststatus which can be used to retrieve arbitrary content. This way, users with a role as low as Contributor can gain access to content they are not supposed to...

6.8AI score0.00995EPSS
SaveExploits2References1
Rows per page
Query Builder