Improved Include Page <= 1.2 - Contributor+ Arbitrary Posts/Pages Access
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 1.0%
probabilidade de exploração
1.0%top 41% das CVEs
exploração observada
nãonenhuma fonte reporta
The Improved Include Page WordPress plugin through 1.2 allows passing shortcode attributes with post_type & post_status which can be used to retrieve arbitrary content. This way, users with a role as low as Contributor can gain access to content they are not supposed to.
Produtos afetados
Unknown · Improved Include Page