The User Meta Shortcodes WordPress... CVE-2021-24859

4.0 AV AC AU C I A
发布： 2021-12-13
修订： 2024-11-21

The User Meta Shortcodes WordPress plugin through 0.5 registers a shortcode that allows any user with a role as low as contributor to access other users metadata by specifying the user login as a parameter. This makes the WP instance vulnerable to data extrafiltration, including password hashes

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有1条受影响产品信息