CVE-2014-5337
medium · 5The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to password protected posts, which allows remote attackers to obtain sensitive information via an exportarticles action to export/content.php.
5
CVSS
17.0%
EPSS (exploit prob.)
97th
EPSS percentile
2014-08-29
Published
AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-264
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| wordpress_mobile_pack_project | wordpress_mobile_pack | <= 2.0.1 |
| wordpress_mobile_pack_project | wordpress_mobile_pack | 1.2.0 |
| wordpress_mobile_pack_project | wordpress_mobile_pack | 1.2.0 |
| wordpress_mobile_pack_project | wordpress_mobile_pack | 1.2.0 |
| wpmobilepack | wordpress_mobile_pack | 1.0.8223 |
| wpmobilepack | wordpress_mobile_pack | 1.1.1 |
| wpmobilepack | wordpress_mobile_pack | 1.1.2 |
| wpmobilepack | wordpress_mobile_pack | 1.1.3 |
| wpmobilepack | wordpress_mobile_pack | 1.1.9 |
| wpmobilepack | wordpress_mobile_pack | 1.1.91 |
| wpmobilepack | wordpress_mobile_pack | 1.1.92 |
| wpmobilepack | wordpress_mobile_pack | 1.2.1 |
| wpmobilepack | wordpress_mobile_pack | 1.2.3 |
| wpmobilepack | wordpress_mobile_pack | 1.2.4 |
| wpmobilepack | wordpress_mobile_pack | 1.2.5 |
| wpmobilepack | wordpress_mobile_pack | 2.0 |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/60584
- http://wordpress.org/plugins/wordpress-mobile-pack/changelog/
- http://www.securityfocus.com/bid/69292
- https://security.dxw.com/advisories/information-disclosure-vulnerability-in-wordpress-mobile-pack-allows-anybody-to-read-password-protected-posts/
- http://secunia.com/advisories/60584
- http://wordpress.org/plugins/wordpress-mobile-pack/changelog/
- http://www.securityfocus.com/bid/69292
- https://security.dxw.com/advisories/information-disclosure-vulnerability-in-wordpress-mobile-pack-allows-anybody-to-read-password-protected-posts/
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2014-5337