CVE-2024-3228 – Social Sharing Plugin – Kiwi <= 2.1.7 - Information Disclosure

https://notcve.org/view.php?id=CVE-2024-3228

The Social Sharing Plugin – Kiwi plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.1.7 via the 'kiwi-nw-pinterest' class. This makes it possible for unauthenticated attackers to view limited content from password protected posts. El complemento Social Sharing Plugin – Kiwi para WordPress es vulnerable a la exposición de la información en todas las versiones hasta la 2.1.7 incluida a través de la clase 'kiwi-nw-pinterest'. Esto hace posible que atacantes no autenticados vean contenido limitado de publicaciones protegidas con contraseña. • https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3109786%40kiwi-social-share&new=3109786%40kiwi-social-share&sfp_email=&sfph_mail= https://www.wordfence.com/threat-intel/vulnerabilities/id/896a038f-fe54-4120-842e-093ef236a898?source=cve • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •