Lucene search

K
wpvulndbWpvulndbWPVDB-ID:A59A0BA6-55E3-431A-BCBF-FA82F1365452
HistoryAug 09, 2023 - 12:00 a.m.

FULL - Customer < 2.3 - Subscriber+ Health Check Disclosure

2023-08-0900:00:00
wpscan.com
1
plugin
authorization
rest api
sensitive information
wordpress

AI Score

6

Confidence

High

EPSS

0.001

Percentile

21.7%

Description The plugin does not have proper authorisation in its health REST API, allowing any authenticated user, such as subscriber to access it and retrieve sensitive information from the WordPress health check

AI Score

6

Confidence

High

EPSS

0.001

Percentile

21.7%

Related for WPVDB-ID:A59A0BA6-55E3-431A-BCBF-FA82F1365452