【plugin】『Author Box, Guest Author and Co-Authors for Your Posts – Molongui』(versions 4.7.4 以下) Information Exposure via ma_debugの脆弱性


WordPress用プラグイン「Author Box」「Guest Author」「Co-Authors for Your Posts – Molongui」には、4.7.4までのすべてのバージョンにおいて、「ma_debu」パラメータを経由した機密情報暴露の脆弱性があります。このため、認証されていない攻撃者が、投稿者の電子メールや名前などの機密データを抜き取ることが可能です。




This record contains material that is subject to copyright

Copyright 2012-2024 Defiant Inc.

License:Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant’s copyright designation and this license in any such copy. Read more.