WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments

2020-06-1100:00:00

wpscan.com

265

Props to Carolina Nymark for discovering an issue where comments from password-protected posts and pages could be displayed under certain conditions.

CPENameOperatorVersion
wordpresseq5.4.1
wordpresslt5.4.2
wordpresseq5.4
wordpresslt5.4.2
wordpresseq5.3.3
wordpresslt5.3.4
wordpresseq5.3.2
wordpresslt5.3.4
wordpresseq5.3.1
wordpresslt5.3.4

Name	Operator	Version
wordpress	eq	5.4.1
wordpress	lt	5.4.2
wordpress	eq	5.4
wordpress	lt	5.4.2
wordpress	eq	5.3.3
wordpress	lt	5.3.4
wordpress	eq	5.3.2
wordpress	lt	5.3.4
wordpress	eq	5.3.1
wordpress	lt	5.3.4