The MapPress Maps for WordPress... CVE-2024-0421

- AV AC AU C I A
发布: 2024-02-12
修订: 2024-08-30

The MapPress Maps for WordPress plugin before 2.88.16 does not ensure that posts to be retrieve via an AJAX action is a public map, allowing unauthenticated users to read arbitrary private and draft posts.

0%
暂无可用Exp或PoC
当前有0条受影响产品信息