CVE-2023-0890
Shortcodes Ultimate < 5.12.8 - Subscriber+ Arbitrary Post Access
Severity Score
6.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The WordPress Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 5.12.8 does not ensure that posts to be displayed via some shortcodes are already public and can be accessed by the user making the request, allowing any authenticated users such as subscriber to view draft, private or even password protected posts. It is also possible to leak the password of protected posts
The Shortcodes Ultimate plugin for WordPress is vulnerable to unauthorized access of data due to missing authorization controls in a plugin's shortcode in versions up to, and including, 5.12.7. This makes it possible for authenticated attackers with subscriber-level permissions and above to read arbitrary posts.
*Credits:
Erwan LR (WPScan), WPScan
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-02-17 CVE Reserved
- 2023-02-27 CVE Published
- 2024-08-02 CVE Updated
- 2024-08-02 First Exploit
- 2024-10-10 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-639: Authorization Bypass Through User-Controlled Key
- CWE-862: Missing Authorization
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|---|---|
| https://wpscan.com/vulnerability/8a466f15-f112-4527-8b02-4544a8032671 | 2024-08-02 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Getshortcodes Search vendor "Getshortcodes" | Shortcodes Ultimate Search vendor "Getshortcodes" for product "Shortcodes Ultimate" | < 5.12.8 Search vendor "Getshortcodes" for product "Shortcodes Ultimate" and version " < 5.12.8" | wordpress |
Affected
| ||||||