WordPress does not properly restrict... CVE-2023-5561

- AV AC AU C I A
发布： 2023-10-16
修订： 2023-11-20

WordPress does not properly restrict which user fields are searchable via the REST API, allowing unauthenticated attackers to discern the email addresses of users who have published public posts on an affected website via an Oracle style attack

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有17条受影响产品信息