CVE-2022-0594CWE-863

Shareaholic < 9.7.6 - Information Disclosure

published July 25, 2022

CVSS
—
EPSS
2%
Percentile
82.3
In the wild
Unconfirmed
What it is

The Professional Social Sharing Buttons, Icons & Related Posts WordPress plugin before 9.7.6 does not have proper authorisation check in one of the AJAX action, available to unauthenticated (in v < 9.7.5) and author+ (in v9.7.5) users, allowing them to call it and retrieve various information such as the list of active plugins, various version like PHP, cURL, WP etc.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02188 · 82.3th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2022-07-25T12:45Z
EPSS history
Timeline
  • 25 JUL 12:45Z
    Shareaholic < 9.7.6 - Information Disclosure
    cvelistv5