The export/content.php exportarticle feature in the wordpress-mobile-pack plugin before 2.1.3 2015-06-03 for WordPress allows remote attackers to obtain sensitive information because the content of a privately published post is sent in JSON format.
References
Link | Resource |
---|---|
https://www.openwall.com/lists/oss-security/2015/07/19/1 | Mailing List Third Party Advisory |
https://wordpress.org/plugins/wordpress-mobile-pack/#developers | Release Notes Third Party Advisory |
https://seclists.org/fulldisclosure/2015/Jul/97 | Exploit Mailing List Third Party Advisory |
Configurations
Information
Published : 2018-10-01 16:29
Updated : 2018-11-23 11:18
NVD link : CVE-2015-9269
Mitre link : CVE-2015-9269
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
wpmobilepack
- wordpress_mobile_pack