CVE-2015-9269

The export/content.php exportarticle feature in the wordpress-mobile-pack plugin before 2.1.3 2015-06-03 for WordPress allows remote attackers to obtain sensitive information because the content of a privately published post is sent in JSON format.
References
Link Resource
https://www.openwall.com/lists/oss-security/2015/07/19/1 Mailing List Third Party Advisory
https://wordpress.org/plugins/wordpress-mobile-pack/#developers Release Notes Third Party Advisory
https://seclists.org/fulldisclosure/2015/Jul/97 Exploit Mailing List Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:wpmobilepack:wordpress_mobile_pack:*:*:*:*:*:wordpress:*:*

Information

Published : 2018-10-01 16:29

Updated : 2018-11-23 11:18


NVD link : CVE-2015-9269

Mitre link : CVE-2015-9269


JSON object : View

CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Advertisement

dedicated server usa

Products Affected

wpmobilepack

  • wordpress_mobile_pack