Beveiligingsadvies

CVE-2022-2535

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-08-15 08:38:10

Laatst bijgewerkt 2024-08-03 00:39:08

Toegewezen door WPScan

CVSS-score geen score

Status PUBLISHED

Beschrijving

The SearchWP Live Ajax Search WordPress plugin before 1.6.2 does not ensure that users making a live search are limited to published posts only, allowing unauthenticated users to make a crafted query disclosing private/draft/pending post titles along with their permalink

← Alle CVE's bekijken Bekijk op cve.org ↗