4.3

CVE-2023-6257

Exploit

Inline Related Posts < 3.6.0 - Subscriber+ Password Protected Post Read

Inline Related Posts <= 3.5.0 - Information Exposure

The Inline Related Posts WordPress plugin before 3.6.0 is missing authorization in an AJAX action to ensure that users are allowed to see the content of the posts displayed, allowing any authenticated user, such as subscriber to retrieve the content of password protected posts
Mögliche Gegenmaßnahme
Inline Related Posts: Update to version 3.6.0, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Data443 ≫ Inline Related Posts SwPlatformwordpress Version < 3.6.0
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt Inline Related Posts
Version *-3.5.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.43% 0.34
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://wpscan.com/vulnerability/19a86448-8d7c-4f02-9290-d9f93810e6e1/
Third Party Advisory
Exploit
https://www.wordfence.com/threat-intel/vulnerabilities/id/d9318d57-499b-4804-8f83-1e4a68c5790f
Third Party Advisory