IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
5.3Orta

CVE-2024-8195Permalink Manager Lite <= 2.4.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure

mbis Permalink Manager Lite; permalink_manager_lite_project permalink_manager_lite Yayım: (2 yıl önce)

Açıklama

The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'debug_data', 'debug_query', and 'debug_redirect' functions in all versions up to, and including, 2.4.4. This makes it possible for unauthenticated attackers to extract sensitive data including password, title, and content of password-protected posts.

Zayıflık türü (CWE): CWE-862

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
mbis Permalink Manager Lite ≤ 2.4.4
permalink manager lite project permalink manager lite —
permalink_manager_lite_project permalink_manager_lite ≤ 2.4.4

Kaynaklar ve yamalar

Aynı üründe son açıklar — WordPress plugins & themes