CVE-2023-0749 - Authorization Bypass Through User-Controlled Key

Severity

65%

Complexity

27%

Confidentiality

60%

The Ocean Extra WordPress plugin before 2.1.3 does not ensure that the template to be loaded via a shortcode is actually a template, allowing any authenticated users such as subscriber to retrieve the content of arbitrary posts, such as draft, private or even password protected ones.

CVSS 3.1 Base Score 6.5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Overview

First reported 1 year ago

2023-03-13 17:15:00

Last updated 1 year ago

2023-11-07 04:01:00

Affected Software

OceanWP Ocean Extra for WordPress

wordpress

References

https://wpscan.com/vulnerability/9caa8d2e-383b-47d7-8d21-d2ed6b1664cb

https://wpscan.com/vulnerability/9caa8d2e-383b-47d7-8d21-d2ed6b1664cb

Exploit, Third Party Advisory

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.