Skip to main content

Wp Show Posts

2 CVEs product

Monthly

CVE-2023-6731 May 02, 17:15 MEDIUM PATCH This Month

The WP Show Posts plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple AJAX functions in all versions up to, and including, 1.1.5. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

WordPress Authentication Bypass Generatepress Wp Show Posts Wordpress Plugin
NVD
CVSS 3.1
4.3
EPSS
0.2%
CVE-2024-1479 Mar 13, 16:15 MEDIUM PATCH This Month

The WP Show Posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.4 via the wpsp_display function. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Incorrect Authorization vulnerability could allow attackers to bypass authorization checks to access restricted resources.

WordPress Authentication Bypass Information Disclosure Generatepress Wp Show Posts +1
NVD
CVSS 3.1
5.3
EPSS
0.3%
EPSS 0% CVSS 4.3
MEDIUM PATCH This Month

The WP Show Posts plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple AJAX functions in all versions up to, and including, 1.1.5. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

WordPress Authentication Bypass Generatepress +2
NVD
EPSS 0% CVSS 5.3
MEDIUM PATCH This Month

The WP Show Posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.4 via the wpsp_display function. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Incorrect Authorization vulnerability could allow attackers to bypass authorization checks to access restricted resources.

WordPress Authentication Bypass Information Disclosure +3
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy