Exploit Report

Computer Security And Bug Information

CVE-2023-0749

CVECVE-2023-0749
CVE Title
Published Date2023-03-13T17:15Z
Modified Date2023-03-16T15:54Z
CWE TypeNVD-CWE-noinfo
CVSS 3.xCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
DescriptionThe Ocean Extra WordPress plugin before 2.1.3 does not ensure that the template to be loaded via a shortcode is actually a template, allowing any authenticated users such as subscriber to retrieve the content of arbitrary posts, such as draft, private or even password protected ones.
References
By clicking these links you will leave this website. We do not endorse and will not be held accountable for any activity on external sites.
Reference URLhttps://wpscan.com/vulnerability/9caa8d2e-383b-47d7-8d21-d2ed6b1664cb
Reference DescriptionMISC https://wpscan.com/vulnerability/9caa8d2e-383b-47d7-8d21-d2ed6b1664cb
Reference Description
TagsExploit Third Party Advisory
Sources NIST MITRE

This site's data is aggregated programmatically and provided "as is" without any representations or warranties, express or implied. Exploit.report is not affiliated with the The MITRE Corporation, U.S. Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA), or US government in any way. CVE and the CVE logo are registered trademarks of The MITRE Corporation

© 2022 Exploit.Report | Data | Contact | Privacy Policy | Articles