Beveiligingsadvies

CVE-2024-0839

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-03-13 15:26:36

Laatst bijgewerkt 2026-04-08 16:40:50

Toegewezen door Wordfence

CVSS-score 5.3

Status PUBLISHED

Beschrijving

The FeedWordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2022.0222 due to missing validation on the user controlled 'guid' key. This makes it possible for unauthenticated attackers to view draft posts that may contain sensitive information.

← Alle CVE's bekijken Bekijk op cve.org ↗