Lucene search

K
wpvulndbKrzysztof Zając (CERT PL)WPVDB-ID:6CAD602B-7414-4867-8AE2-F0B846C4C8F0
HistoryNov 29, 2023 - 12:00 a.m.

BestWebSoft's Like & Share < 2.74 - Unauthenticated Password Protected Post Read

2023-11-2900:00:00
Krzysztof Zając (CERT PL)
wpscan.com
6
bestwebsoft
like & share
unauthenticated
password protected
post read
plugin
poc
web browser
og:description
meta tag
security

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

37.0%

Description The plugin discloses the content of password protected posts to unauthenticated users via a meta tag

PoC

In the web browser, view the source of any password protected post and check the og:description meta tag

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

37.0%

Related for WPVDB-ID:6CAD602B-7414-4867-8AE2-F0B846C4C8F0