Lucene search
Krzysztof Zając (CERT PL)WPVDB-ID:D5B59E9E-85E5-4D26-AEBE-64757C8495FAHistoryNov 06, 2023 - 12:00 a.m.
Simple Social Buttons < 5.1.1 - Unauthenticated Password Protected Post Access
2023-11-0600:00:00
Krzysztof Zając (CERT PL)
wpscan.com
3
plugin
password-protected
content disclosure
meta tags
unauthenticated access
software
0.0005 Low
EPSS
Percentile
17.1%
Description The plugin leaks password-protected post content to unauthenticated visitors in some meta tags
PoC
As unauthenticated, view the source of any password-protected post and see that the content of the post is disclosed in the og:description and twitter:description meta tags
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 5.1.1 |
Related
cve
cve
CVE-2023-5845
2023-11-27 17:15:09
cvelist
cvelist
wpexploit
wpexploit
nvd
nvd
CVE-2023-5845
2023-11-27 17:15:09
prion
prion
Code injection
2023-11-27 17:15:00