Lucene search
+L

2 matches found

CNVD
CNVD
•added 2021/12/18 12:00 a.m.•49 views

WordPress Page/Post Content Shortcode plugin authorization issue vulnerability

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. WordPress Page/Post Content Shortcode plugin in and prior versions is vulnerable to an authorization...

4.3CVSS2.3AI score0.00809EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/13 12:00 a.m.•4 views

CVE-2021-24819: Incorrect Authorization

The Page/Post Content Shortcode WordPress plugin through 1.0 does not have proper authorisation in place, allowing users with a role as low as contributor to access draft/private/password protected/trashed posts/pages they should not be allowed to, including posts created by other users such as...

4.3CVSS5.8AI score0.00809EPSS
SaveExploits2References3
Rows per page
Query Builder