CVE-2023-6257

Inline Related Posts < 3.6.0 - Subscriber+ Password Protected Post Read

Medium · published April 11, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
38.2
In the wild
Unconfirmed
What it is

The Inline Related Posts WordPress plugin before 3.6.0 is missing authorization in an AJAX action to ensure that users are allowed to see the content of the posts displayed, allowing any authenticated user, such as subscriber to retrieve the content of password protected posts

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00451 · 38.2th percentile
Published
2024-04-11T05:00Z
EPSS history
Timeline
  • 11 APR 05:00Z
    Inline Related Posts < 3.6.0 - Subscriber+ Password Protected Post Read
    cvelistv5