Ausnahme gefangen: SSL certificate problem: certificate is not yet valid 📌 [REST API] Allow authors to read their own password protected posts
Team IT Security Nachrichtenportal Logo

🏠 Team IT Security News

TSecurity.de ist eine Online-Plattform, die sich auf die Bereitstellung von Informationen,alle 15 Minuten neuste Nachrichten, Bildungsressourcen und Dienstleistungen rund um das Thema IT-Sicherheit spezialisiert hat.
Ob es sich um aktuelle Nachrichten, Fachartikel, Blogbeiträge, Webinare, Tutorials, oder Tipps & Tricks handelt, TSecurity.de bietet seinen Nutzern einen umfassenden Überblick über die wichtigsten Aspekte der IT-Sicherheit in einer sich ständig verändernden digitalen Welt.

16.12.2023 - TIP: Wer den Cookie Consent Banner akzeptiert, kann z.B. von Englisch nach Deutsch übersetzen, erst Englisch auswählen dann wieder Deutsch!

Google Android Playstore Download Button für Team IT Security
RSS Feed Symbol für Team IT Security 800+ IT News als RSS Feed abonnieren



📚 [REST API] Allow authors to read their own password protected posts


💡 Newskategorie: Sicherheitslücken
🔗 Quelle: portal.patchman.co

Allow authenticated users to read the contents of password protected posts if they have the `edit_post` meta capability for the post.

This vulnerability affects the following application versions:

  • WordPress 4.7
  • WordPress 4.7.1
  • WordPress 4.7.2
  • WordPress 4.7.3
  • WordPress 4.7.4
  • WordPress 4.7.5
  • WordPress 4.7.6
  • WordPress 4.7.7
  • WordPress 4.7.8
  • WordPress 4.7.9
  • WordPress 4.7.10
  • WordPress 4.7.11
  • WordPress 4.7.12
  • WordPress 4.7.13
  • WordPress 4.7.14
  • WordPress 4.7.15
  • WordPress 4.7.16
  • WordPress 4.7.17
  • WordPress 4.7.18
  • WordPress 4.7.19
  • WordPress 4.8
  • WordPress 4.8.1
  • WordPress 4.8.2
  • WordPress 4.8.3
  • WordPress 4.8.4
  • WordPress 4.8.5
  • WordPress 4.8.6
  • WordPress 4.8.7
  • WordPress 4.8.8
  • WordPress 4.8.9
  • WordPress 4.8.10
  • WordPress 4.8.11
  • WordPress 4.8.12
  • WordPress 4.8.13
  • WordPress 4.8.14
  • WordPress 4.8.15
  • WordPress 4.9
  • WordPress 4.9.1
  • WordPress 4.9.2
  • WordPress 4.9.3
  • WordPress 4.9.4
  • WordPress 4.9.5
  • WordPress 4.9.6
  • WordPress 4.9.7
  • WordPress 4.9.8
  • WordPress 4.9.9
  • WordPress 4.9.10
  • WordPress 4.9.11
  • WordPress 4.9.12
  • WordPress 4.9.13
  • WordPress 4.9.14
  • WordPress 4.9.15
  • WordPress 4.9.16
  • WordPress 5.0
  • WordPress 5.0.1
  • WordPress 5.0.2
  • WordPress 5.0.3
  • WordPress 5.0.4
  • WordPress 5.0.6
  • WordPress 5.0.7
  • WordPress 5.0.8
  • WordPress 5.0.9
  • WordPress 5.0.10
  • WordPress 5.0.11
  • WordPress 5.0 Beta 3
  • WordPress 5.0 Beta 4
  • WordPress 5.0 RC1
  • WordPress 5.0 RC2
  • WordPress 5.0 RC3
  • WordPress 5.1
  • WordPress 5.1.1
  • WordPress 5.1.2
  • WordPress 5.1.3
  • WordPress 5.1.4
  • WordPress 5.1.5
  • WordPress 5.1.6
  • WordPress 5.1.7
  • WordPress 5.1.8
  • WordPress 5.2
  • WordPress 5.2.1
  • WordPress 5.2.2
  • WordPress 5.2.3
  • WordPress 5.2.4
  • WordPress 5.2.5
  • WordPress 5.2.6
  • WordPress 5.2.7
  • WordPress 5.2.8
  • WordPress 5.2.9
  • WordPress 5.2 Beta 1
  • WordPress 5.2 Beta 2
  • WordPress 5.3
  • WordPress 5.3.1
  • WordPress 5.3.2
  • WordPress 5.3.3
  • WordPress 5.3.4
  • WordPress 5.3.5
  • WordPress 5.3.6
  • WordPress 5.4
  • WordPress 5.4.1
  • WordPress 5.4.2
  • WordPress 5.4.3
  • WordPress 5.4.4
  • WordPress 5.5
  • WordPress 5.5.1
  • WordPress 5.5.2
  • WordPress 5.5.3
  • WordPress 5.6
  • WordPress 5.6.1
  • WordPress 5.6.2
  • WordPress 5.7
...



Sharing is caring on Social Media

🔗 Reddit
🔗 Telegram
🔗 LinkedIn
🔗 Xing
🔗 Twitter
🔗 Whatsapp
🔗 Facebook
🔗 Flipboard

Join the Team IT Security Community

🔗 "IT Sicherheit" Reddit-Gruppe
🔗 "IT Sicherheit" Telegramm-Seite

📌 [REST API] Allow authors to read their own password protected posts


📈 99.27 Punkte

📌 Huawei releases it's own desktop PC with their own OS based on Linux and their own ARM CPU.


📈 41.23 Punkte

📌 CVE-2019-10716 | Verodin Director up to 3.5.3.1 JSON REST API /integrations.json API Request Credentials insufficiently protected credentials (ID 156214)


📈 35.5 Punkte

📌 CVE-2024-1088 | Password Protected Store for WooCommerce Plugin up to 1.9 on WordPress REST API information disclosure


📈 35.27 Punkte

📌 RESTler - The First Stateful REST API Fuzzing Tool For Automatically Testing Cloud Services Through Their REST APIs And Finding Security And Reliability Bugs In These Services


📈 34.79 Punkte

📌 wp-google-maps Plugin up to 7.11.17 on WordPress REST API class.rest-api.php SELECT Statement sql injection


📈 33.74 Punkte

📌 WP Live Chat Support up to 8.0.32 on WordPress REST API REST API Call privilege escalation


📈 33.74 Punkte

📌 Hitb armory is a place where researchers will get to show off their projects, run their demos and allow you to play around with their security tools.


📈 32.34 Punkte

📌 CVE-2023-39921 | Molongui Author Box, Guest Author and Co-Authors for Your Posts Plugin cross site scripting


📈 29.52 Punkte

📌 Some great first posts from new authors 💞


📈 29.52 Punkte

📌 Some great new posts from new authors in February 💞


📈 29.52 Punkte

📌 Some great new posts from new authors in March 💞


📈 29.52 Punkte

📌 Oracle Communications Session Route Manager 8.1.1/8.2.0/8.2.1 REST API insufficiently protected credentials


📈 29.25 Punkte

📌 Oracle Communications Session Report Manager 8.1.1/8.2.0/8.2.1 REST API insufficiently protected credentials


📈 29.25 Punkte

📌 Oracle Communications Element Manager 8.1.1/8.2.0/8.2.1 REST API insufficiently protected credentials


📈 29.25 Punkte

📌 Malware Authors Adopting the Freemium Model Spells Bad News for the Rest of Us


📈 28.63 Punkte

📌 Malware Authors Adopting the Freemium Model Spells Bad News for the Rest of Us


📈 28.63 Punkte

📌 [20170112] Public posts disclose user information through the REST API


📈 28.38 Punkte

📌 Silver Peak EdgeConnect SD-WAN up to 8.1.6.x REST API rest/json/banners JSON Data Trace information disclosure


📈 27.49 Punkte

📌 The REST API Handbook – How to Build, Test, Consume and Document REST APIs


📈 27.49 Punkte

📌 WordPress bis 4.7.0 REST API class-wp-rest-users-controller.php Information Disclosure


📈 27.49 Punkte

📌 WordPress bis 4.7.0 REST API class-wp-rest-users-controller.php Information Disclosure


📈 27.49 Punkte

📌 WordPress 4.7.0 REST API class-wp-rest-users-controller.php information disclosure


📈 27.49 Punkte

📌 Allow shop managers to only manipulate customers through REST API


📈 27.32 Punkte

📌 Check for permissions before allow edit REST API keys


📈 27.32 Punkte

📌 Metadata Analysis Draws its Own Conclusions on WannaCry Authors


📈 26.88 Punkte

📌 Malware Authors Inadvertently Take Down Own Botnet


📈 26.88 Punkte

📌 Buggy Phishing Kits Allow Criminals to Cannibalize Their Own


📈 26.62 Punkte

📌 Microsoft to allow Xbox Cloud Gaming users to bring their own games later this year


📈 26.62 Punkte

📌 Microsoft Will Allow Windows 10 Users to Create Their Own Fonts


📈 26.62 Punkte

📌 Do hard drive shredding companies allow home consumers to watch their own hard drives get shredded?


📈 26.62 Punkte

📌 Deere Will Allow Farmers To Repair Their Own Equipment


📈 26.62 Punkte

📌 Researchers Find New Hack to Read Content Of Password Protected PDF Files


📈 26.26 Punkte

📌 Pastebin adds 'Burn After Read' and 'Password Protected Pastes' to the dismay of the infosec community


📈 26.26 Punkte

📌 Pastebin Introduce New Security Features: “Burn After Read” And Password Protected Pastes


📈 26.26 Punkte











matomo

Kontakt

24/7 kontakt@tsecurity.de

Weitere Informationen

Google Android Playstore Download Button für Team IT Security
🔗 Impressum
🔗 Datenschutz
Paypal Spenden für Projekt

Social Media

🔗 Facebook
🔗 Reddit
🔗 Team IT Security als Elektron App
🔗 © 2015-2023 Team IT Security Nachrichtenportal über Cybersecurity
🔗 CMS "myDraft" a PHP Portal Software