The Slider WordPress plugin before 3.5.12 does not ensure that posts to be accessed via an AJAX action are slides and can be viewed by the user making the request, allowing any authenticated users, such as subscriber to access the content arbitrary post such as private, draft and password protected
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/1afc0e4a-f712-47d4-bf29-7719ccbbbb1b | Exploit Third Party Advisory |
| https://wpscan.com/vulnerability/1afc0e4a-f712-47d4-bf29-7719ccbbbb1b | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 08:43
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://wpscan.com/vulnerability/1afc0e4a-f712-47d4-bf29-7719ccbbbb1b - Exploit, Third Party Advisory |
21 Dec 2023, 19:35
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://wpscan.com/vulnerability/1afc0e4a-f712-47d4-bf29-7719ccbbbb1b - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:wpfrank:slider_factory_pro:*:*:*:*:*:wordpress:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| CWE | NVD-CWE-noinfo | |
| First Time |
Wpfrank
Wpfrank slider Factory Pro |
18 Dec 2023, 20:21
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-18 20:15
Updated : 2024-11-21 08:43
NVD link : CVE-2023-6077
Mitre link : CVE-2023-6077
CVE.ORG link : CVE-2023-6077
JSON object : View
Products Affected
wpfrank
- slider_factory_pro
CWE