CVE-2014-5337

23Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendepss 17%

probabilidad de explotación

17%top 3% de las CVE

explotación observada

noninguna fuente lo reporta

The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to password protected posts, which allows remote attackers to obtain sensitive information via an exportarticles action to export/content.php.

Productos afectados

n/a · n/a

Referencias

http://secunia.com/advisories/60584 https://security.dxw.com/advisories/information-disclosure-vulnerability-in-wordpress-mobile-pack-allows-anybody-to-read-password-protected-posts/http://wordpress.org/plugins/wordpress-mobile-pack/changelog/http://www.securityfocus.com/bid/69292