Vulnerability Bulletins |
Authenticated Information Disclosure Vulnerability in Share Drafts Publicly |
|
| Affected software | Wordpress |
|
https://www.pluginvulnerabilities.com/2017/09/19/authenticated-information-disclosure-vulnerability-in-share-drafts-publicly/The changelog entry for version 1.1.4 of Share Drafts Publicly is “Added security enhancements.”. In looking over that we found a change was made to fix a cross-site request forgery (CSRF) vulnerability that existed with AJAX functionality to share a draft of a post or page publicly. The exploitability of that is limited since an attacker that […] More info: https://www.pluginvulnerabilities.com/2017/09/19/authenticated-information-disclosure-vulnerability-in-share-drafts-publicly/ |
|