6 matches found
CVE-2025-11983: Exposure of Sensitive Information to an Unauthorized Actor
The WP Discourse plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5.9. This is due to the plugin unconditionally sending Discourse API credentials Api-Key and Api-Username headers to any host specified in a post's discoursepermalink custom field...
CVE-2024-35168
Missing Authorization vulnerability in Discourse WP Discourse.This issue affects WP Discourse: from n/a through 2.5.1...
CVE-2024-35168
Missing Authorization vulnerability in Discourse WP Discourse.This issue affects WP Discourse: from n/a through 2.5.1...
CVE-2024-35168
CVE-2024-35168 is a Missing Authorization vulnerability in the WordPress plugin WP Discourse, affecting WP Discourse versions from unspecified (n/a) up to 2.5.1. The public data provide a CVSS v3.1 base score of 4.3 (Network attack, Low attack complexity, Low privileges required, No user interact...
PT-2024-26349
Name of the Vulnerable Software and Affected Versions WP Discourse versions 2.5.1 and earlier Description A Missing Authorization issue has been identified. This issue affects the Discourse WP Discourse plugin. Recommendations For WP Discourse versions 2.5.1 and earlier, update to a version later...