The Simple Blog Card WordPress plugin before 1.32 does not ensure that posts to be displayed via a shortcode are public, allowing any authenticated users, such as subscriber, to retrieve arbitrary post title and their content such as draft, private and password protected ones
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published: 2023-08-30T14:22:01.184Z
Updated: 2024-08-02T07:17:11.721Z
Reserved: 2023-08-01T08:05:12.025Z
Link: CVE-2023-4036
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-08-30T15:15:09.813
Modified: 2023-11-07T04:22:04.067
Link: CVE-2023-4036
Redhat
No data.