CVE-2023-1371: medium-severity vulnerability in W4 Post List
W4 Post List < 2.4.6 - Subscriber+ Password Protected Post Content Disclosure
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.5epss 0.7%
The W4 Post List WordPress plugin before 2.4.6 does not ensure that password protected posts can be accessed before displaying their content, which could allow any authenticated users to access them
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
Unknown · W4 Post ListRelated CVEs — W4 Post List
In the same product, most dangerous first.