admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 02:31:38 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2024/CVE-2024-0881.md
0xMarcio c24be57ea5 Update CVE sources 2024-08-31 19:52
2024-08-31 19:52:39 +00:00

974 B
Raw Permalink Blame History

CVE-2024-0881

Description

The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel WordPress plugin before 2.2.76 does not have proper authorization, resulting in password protected posts to be displayed in the result of some unauthenticated AJAX actions, allowing unauthenticated users to read such posts

POC

Reference

Github