Lucene search

K
wpvulndbWpvulndbWPVDB-ID:3413B879-785F-4C9F-AA8A-5A4A1D5E0BA2
HistoryOct 14, 2019 - 12:00 a.m.

WordPress <= 5.2.3 - Unauthenticated View Private/Draft Posts

2019-10-1400:00:00
wpscan.com
91

This vulnerability could allow an unauthenticated user to view private or draft posts due to an issue within WP_Query.

PoC

http://wordpress.local/?static=1&amp;order;=asc