CVE-2014-5337

23Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 17%

probabilidade de exploração

17%top 3% das CVEs

exploração observada

nãonenhuma fonte reporta

The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to password protected posts, which allows remote attackers to obtain sensitive information via an exportarticles action to export/content.php.

Produtos afetados

n/a · n/a

Referências

http://secunia.com/advisories/60584 https://security.dxw.com/advisories/information-disclosure-vulnerability-in-wordpress-mobile-pack-allows-anybody-to-read-password-protected-posts/http://wordpress.org/plugins/wordpress-mobile-pack/changelog/http://www.securityfocus.com/bid/69292