2 matches found
WordPress Page/Post Content Shortcode plugin authorization issue vulnerability
WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. WordPress Page/Post Content Shortcode plugin in and prior versions is vulnerable to an authorization...
4.3CVSS2.3AI score0.00809EPSS
SaveExploits2References1
CVE-2021-24819: Incorrect Authorization
The Page/Post Content Shortcode WordPress plugin through 1.0 does not have proper authorisation in place, allowing users with a role as low as contributor to access draft/private/password protected/trashed posts/pages they should not be allowed to, including posts created by other users such as...
4.3CVSS5.8AI score0.00809EPSS
SaveExploits2References3
20