CVE-2023-6250

The BestWebSoft's Like & Share WordPress plugin before 2.74 discloses the content of password protected posts to unauthenticated users via a meta tag...

CVE-2023-6250

The BestWebSoft's Like & Share WordPress plugin before 2.74 discloses the content of password protected posts to unauthenticated users via a meta tag...

Design/Logic Flaw

The BestWebSoft's Like & Share WordPress plugin before 2.74 discloses the content of password protected posts to unauthenticated users via a meta tag...

CVE-2023-6250 BestWebSoft's Like & Share < 2.74 - Unauthenticated Password Protected Post Read

The BestWebSoft's Like & Share WordPress plugin before 2.74 discloses the content of password protected posts to unauthenticated users via a meta tag...

Improper Authorization

gitlab is vulnerable to Improper Authorization. It is possible for a removed project member to write to protected branches by using deploy keys...

WordPress plugin BestWebSoft s Like & Share security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

The vulnerability of the ShutdownObserver() function in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ShutdownObserver function in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to dependencies on behaviors that are undefined for each implementation type. Exploiting this vulnerability could allow a malicious actor to compromise...

PT-2023-32576 · Bestwebsoft · Like & Share

Name of the Vulnerable Software and Affected Versions: BestWebSoft's Like & Share WordPress plugin versions prior to 2.74 Description: The issue allows unauthenticated users to access the content of password-protected posts via a meta tag. Recommendations: For versions prior to 2.74, update to...

The vulnerability of the Accounts component in operating systems macOS, iOS, iPadOS, and watchOS allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Accounts component in operating systems such as macOS, iOS, iPadOS, and watchOS is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability in the Dapr Dashboard’s web interface relates to the lack of authentication for critical functions, allowing attackers to influence the confidentiality of protected information.

The vulnerability in the Dapr Dashboard’s web interface is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to influence the confidentiality of the protected information...

The vulnerability of Hitachi Vantara NAS network storage systems, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.

The vulnerability of Hitachi Vantara NAS network storage systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the `perf_event_validate_size()` function in the kernel/events/core.c module of the perf subsystem in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information, thereby enhancing their privileges within the system.

The vulnerability of the perfeventvalidatesize function in the kernel/events/core.c module of the Linux operating system’s perf subsystem is related to writing beyond the boundaries of a allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the TCC component in the macOS operating system allows a hacker to gain access to protected information.

The vulnerability of the TCC component in the macOS operating system is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of the Welcart eCommerce plugin for the WordPress content management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Welcart eCommerce plugin for the WordPress content management system is related to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow an attacker who operates remotely to gain unauthorized access to protected...

PKCE Downgrade Attack

yiisoft/yii2-authclient is vulnerable to PKCE Downgrade Attack. The vulnerability is caused due to an insecure implementation of PKCE. The application doesn't use authCodeVerifier securely. An attacker can gain unauthorized access to protected resources by exploiting this vulnerability...

The vulnerability of the Scheduled Backups function in the Nagios XI monitoring tool allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Scheduled Backups function in the Nagios XI monitoring tool is related to synchronization errors when using a shared resource during port scanning. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of Microsoft Word text editors, which allows attackers to disclose protected information

The vulnerability of Microsoft Word relates to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability in the config.inc.php script of the Nagios XI monitoring tool allows a hacker to gain unauthorized access to protected information.

The vulnerability of the config.inc.php script used in Nagios XI monitoring involves unencrypted storage of user credentials. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the Inbound/Outbound Transfer function in the Nagios XI monitoring tool allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Inbound/Outbound Transfer function in Nagios XI relates to the unencrypted storage of critical information in the xioptions database table. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to disclose protected information.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to disclose protected information...