CVE-2024-1479: WP Show Posts <= 1.1.4 - Information Exposure
The WP Show Posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.4 via the wpspdisplay function. This makes it possible for authenticated attackers with contributor access and above to view the contents of draft, trash, future, private and pending posts and pages.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-1479?
CVE-2024-1479 is considered a high severity vulnerability due to its potential for unauthorized access to sensitive information.
How do I fix CVE-2024-1479?
To fix CVE-2024-1479, update the WP Show Posts plugin to version 1.1.5 or later.
Who is affected by CVE-2024-1479?
CVE-2024-1479 affects all versions of the WP Show Posts plugin up to and including 1.1.4.
What type of attack is facilitated by CVE-2024-1479?
CVE-2024-1479 allows authenticated attackers with contributor access and above to view sensitive information from drafts and private posts.
Is CVE-2024-1479 known to be exploited in the wild?
As of now, there are no confirmed reports of CVE-2024-1479 being actively exploited in the wild.