← CVE Intelligence

CVE-2023-4036

Simple Blog Card < 1.32 - Subscriber+ Arbitrary Post Access PUBLISHED

Description (CNA)

The Simple Blog Card WordPress plugin before 1.32 does not ensure that posts to be displayed via a shortcode are public, allowing any authenticated users, such as subscriber, to retrieve arbitrary post title and their content such as draft, private and password protected ones

Affected (CNA)

Vendor / productVersions
Unknown / Simple Blog Cardaffected 0 before 1.32

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.