Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Shortcodes Ultimate < 5.12.8 - Subscriber+ Arbitrary Post Access
Vulnerability Description
The WordPress Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 5.12.8 does not ensure that posts to be displayed via some shortcodes are already public and can be accessed by the user making the request, allowing any authenticated users such as subscriber to view draft, private or even password protected posts. It is also possible to leak the password of protected posts
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WordPress Plugin Shortcodes Ultimate 信息泄露漏洞
Vulnerability Description
WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是一个应用插件。 WordPress Plugin Shortcodes Ultimate 5.12.8之前版本存在信息泄露漏洞，该漏洞源于该插件不能确保通过某些简码显示的帖子已经公开并且可以被发出请求的用户访问，攻击者利用该漏洞可以查看草稿、私人、甚至受密码保护的帖子，可能泄
CVSS Information
N/A
Vulnerability Type
N/A