Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpexploitKrzysztof Zając (CERT PL)WPEX-ID:D5B59E9E-85E5-4D26-AEBE-64757C8495FA
HistoryNov 06, 2023 - 12:00 a.m.

Simple Social Buttons < 5.1.1 - Unauthenticated Password Protected Post Access

2023-11-0600:00:00
Krzysztof Zając (CERT PL)
29
social buttons
unauthenticated
password protected
post access
exploit

0.0005 Low

EPSS

Percentile

17.1%

JSON

Description The plugin leaks password-protected post content to unauthenticated visitors in some meta tags

As unauthenticated, view the source of any password-protected post and see that the content of the post is disclosed in the og:description and twitter:description meta tags

Related

cve 1
wpvulndb 1
cvelist 1
nvd 1
prion 1
cve
cve
CVE-2023-5845
2023-11-27 17:15:09
wpvulndb
wpvulndb
Simple Social Buttons < 5.1.1 - Unauthenticated Password Protected Post Access
2023-11-06 00:00:00
cvelist
cvelist
CVE-2023-5845 Simple Social Buttons < 5.1.1 - Unauthenticated Password Protected Post Access
2023-11-27 16:22:02
nvd
nvd
CVE-2023-5845
2023-11-27 17:15:09
prion
prion
Code injection
2023-11-27 17:15:00

0.0005 Low

EPSS

Percentile

17.1%

JSON
Related for WPEX-ID:D5B59E9E-85E5-4D26-AEBE-64757C8495FA
cve1wpvulndb1cvelist1nvd1prion1