PT-2023-32502 · WordPress · Slider

Krzysztof Zając · Publicado 2023-12-18 · Atualizado 2023-12-21 · CVE-2023-6077

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions The Slider WordPress plugin versions prior to 3.5.12

Description The issue allows any authenticated users to access arbitrary posts, including private, draft, and password-protected content, due to insufficient validation of posts accessed via an AJAX action.

Recommendations For versions prior to 3.5.12, update to version 3.5.12 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2023-6077

Produtos afetados

Slider

Referências · 4

• 🔥 https://wpscan.com/vulnerability/1afc0e4a-f712-47d4-bf29-7719ccbbbb1b · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-6077 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-6077 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1736842766112469276 · Publicação no Twitter