Aller au contenu
5.3 Moyenne

CVE-2024-11292 The WP Private Content Plus plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up…

Description

The WP Private Content Plus plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.1 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to higher-level roles such as administrator.

Produits et versions touchés

Produit Versions touchées Corrigé en
WP Private Content Plus 3.6 premières → 3.6.1 Pas de correctif indiqué
wp_private_content_plus_plugin 3.6 premières → 3.6.1 Pas de correctif indiqué
Les 4 CVE de WP Private Content Plus →
Suivre cette CVE