Vulnerability Bulletins |
Authenticated Information Disclosure Vulnerability in Cherry Services List |
|
| Affected software | Wordpress |
|
https://www.pluginvulnerabilities.com/2017/08/09/authenticated-information-disclosure-vulnerability-in-cherry-services-list/While looking into a possible expansion of what we check during our security review of WordPress plugins chosen by our customers we found that the plugin Cherry Services List had an authenticated information disclosure vulnerability. That was caused by the fact that contributor and author level users could duplicate posts that they would not have been able […] More info: https://www.pluginvulnerabilities.com/2017/08/09/authenticated-information-disclosure-vulnerability-in-cherry-services-list/ |
|