WordPress loaded and output approved comments in a singular comment feed before checking whether the visitor may read the post. An unauthenticated visitor could read comments on private, draft or otherwise unpublished posts by requesting the post's comment feed. This vulnerability affects the following application versions: WordPress 3.6 WordPress... Weiterlesen: Unauthenticated Disclosure of Comments on Private Posts in WordPress …
Intelligence View
⚡ tsecurity.de Intelligence
Unauthenticated Disclosure of Comments on Private Posts in WordPress Comment Feeds
WordPress loaded and output approved comments in a singular comment feed before checking whether the visitor may read the post. An unauthenticated visitor…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar