CVE-2024-4997

The WPUpper Share Buttons plugin for WordPress is vulnerable to unauthorized access of data when preparing sharing links for posts and pages in all versions up to, and including, 3.43. This makes it possible for unauthenticated attackers to obtain the contents of password protected posts and page...

CVE-2024-4997 WPUpper Share Buttons <= 3.43 - Missing Authorization

The WPUpper Share Buttons plugin for WordPress is vulnerable to unauthorized access of data when preparing sharing links for posts and pages in all versions up to, and including, 3.43. This makes it possible for unauthenticated attackers to obtain the contents of password protected posts and page...

CVE-2024-4997

CVE-2024-4997 concerns WPUpper Share Buttons for WordPress, claiming unauthorized access to password‑protected post/page contents up to version 3.43. The provided connected documents do not supply technical details, affected versions beyond 3.43, root cause, exploit info, or fixes.

WordPress WPUpper Share Buttons Plugin <= 3.43 is vulnerable to Broken Access Control

Software WPUpper Share Buttons Type Plugin Vulnerable versions = 3.43 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-4997 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 7221465742e4 Credits Krzysztof Zając Required...