PT-2018-4578 · WordPress · Wordpress Mobile Pack

Nitin Venkatesh · Publicado 2018-10-01 · Atualizado 2018-11-23 · CVE-2015-9269

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions WordPress Mobile Pack plugin versions prior to 2.1.3

Description The issue allows remote attackers to obtain sensitive information because the content of a privately published post is sent in JSON format through the export/content.php exportarticle feature.

Recommendations For WordPress Mobile Pack plugin versions prior to 2.1.3, update to version 2.1.3 or later to resolve the issue.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-9269

Produtos afetados

Wordpress Mobile Pack

Referências · 5

• 🔥 https://seclists.org/fulldisclosure/2015/Jul/97 · Exploit
• https://openwall.com/lists/oss-security/2015/07/19/1 · Nota
• https://wordpress.org/plugins/wordpress-mobile-pack/#developers · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9269 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-9269 · Nota de Segurança