WP Cerber Security < 8.9.3 - Rest-API Protection Bypass

2021-08-1900:00:00

wpscan.com

0.001 Low

EPSS

Percentile

39.0%

JSON

The /wp-json REST API endpoint is by default blocked by WP Cerber from accessing its information. However, by appending a ?, the access control list protections are bypassed and data can then be retrieved from it

CPENameOperatorVersion
wp-cerberlt8.9.3

CPE	Name	Operator	Version
	wp-cerber	lt	8.9.3

References

github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0024/FEYE-2021-0024.md

0.001 Low

EPSS

Percentile

39.0%

JSON

Related for WPVDB-ID:0C06ABF1-F01F-4268-A105-02B1327427CF