Unauthorized Access to Password Protected Posts and Pages via Share Buttons Plugin

CVE-2024-4997

5.3MEDIUM

Key Information

Vendor: Victorfreitas
Status: WPupper Share Buttons
Vendor: CVE Published:; 4 June 2024

Summary

The WPUpper Share Buttons plugin for WordPress is vulnerable to unauthorized access of data when preparing sharing links for posts and pages in all versions up to, and including, 3.43. This makes it possible for unauthenticated attackers to obtain the contents of password protected posts and pages.

Affected Version(s)

WPUpper Share Buttons <= 3.43

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Jun 4, 2024
Disclosed
Jun 3, 2024
Vulnerability Reserved.
May 16, 2024

Collectors

NVD DatabaseMitre Database

Credit

Krzysztof Zając