Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for like_\&_share by bestwebsoft

    CVE-2023-6250 (GCVE-0-2023-6250)

    Vulnerability from nvd – Published: 2023-12-26 18:33 – Updated: 2024-08-02 08:21
    VLAI
    Title
    BestWebSoft's Like & Share < 2.74 - Unauthenticated Password Protected Post Read
    Summary
    The BestWebSoft's Like & Share WordPress plugin before 2.74 discloses the content of password protected posts to unauthenticated users via a meta tag
    Severity
    No CVSS data available.
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/6cad602b-7414-48… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown BestWebSoft's Like & Share Affected: 0 , < 2.74 (semver)
    Create a notification for this product.
    Credits
    Krzysztof Zając (CERT PL) WPScan
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T08:21:18.094Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "exploit",
                  "vdb-entry",
                  "technical-description",
                  "x_transferred"
                ],
                "url": "https://wpscan.com/vulnerability/6cad602b-7414-4867-8ae2-f0b846c4c8f0"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://wordpress.org/plugins",
              "defaultStatus": "unaffected",
              "product": "BestWebSoft\u0027s Like \u0026 Share",
              "vendor": "Unknown",
              "versions": [
                {
                  "lessThan": "2.74",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Krzysztof Zaj\u0105c (CERT PL)"
            },
            {
              "lang": "en",
              "type": "coordinator",
              "value": "WPScan"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "The BestWebSoft\u0027s Like \u0026 Share WordPress plugin before 2.74 discloses the content of password protected posts to unauthenticated users via a meta tag"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "CWE-287 Improper Authentication",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-26T18:33:11.036Z",
            "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
            "shortName": "WPScan"
          },
          "references": [
            {
              "tags": [
                "exploit",
                "vdb-entry",
                "technical-description"
              ],
              "url": "https://wpscan.com/vulnerability/6cad602b-7414-4867-8ae2-f0b846c4c8f0"
            }
          ],
          "source": {
            "discovery": "EXTERNAL"
          },
          "title": "BestWebSoft\u0027s Like \u0026 Share \u003c 2.74 - Unauthenticated Password Protected Post Read",
          "x_generator": {
            "engine": "WPScan CVE Generator"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "assignerShortName": "WPScan",
        "cveId": "CVE-2023-6250",
        "datePublished": "2023-12-26T18:33:11.036Z",
        "dateReserved": "2023-11-22T09:41:18.436Z",
        "dateUpdated": "2024-08-02T08:21:18.094Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-6250 (GCVE-0-2023-6250)

    Vulnerability from cvelistv5 – Published: 2023-12-26 18:33 – Updated: 2024-08-02 08:21
    VLAI
    Title
    BestWebSoft's Like & Share < 2.74 - Unauthenticated Password Protected Post Read
    Summary
    The BestWebSoft's Like & Share WordPress plugin before 2.74 discloses the content of password protected posts to unauthenticated users via a meta tag
    Severity
    No CVSS data available.
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/6cad602b-7414-48… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown BestWebSoft's Like & Share Affected: 0 , < 2.74 (semver)
    Create a notification for this product.
    Credits
    Krzysztof Zając (CERT PL) WPScan
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T08:21:18.094Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "exploit",
                  "vdb-entry",
                  "technical-description",
                  "x_transferred"
                ],
                "url": "https://wpscan.com/vulnerability/6cad602b-7414-4867-8ae2-f0b846c4c8f0"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://wordpress.org/plugins",
              "defaultStatus": "unaffected",
              "product": "BestWebSoft\u0027s Like \u0026 Share",
              "vendor": "Unknown",
              "versions": [
                {
                  "lessThan": "2.74",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Krzysztof Zaj\u0105c (CERT PL)"
            },
            {
              "lang": "en",
              "type": "coordinator",
              "value": "WPScan"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "The BestWebSoft\u0027s Like \u0026 Share WordPress plugin before 2.74 discloses the content of password protected posts to unauthenticated users via a meta tag"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "CWE-287 Improper Authentication",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-26T18:33:11.036Z",
            "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
            "shortName": "WPScan"
          },
          "references": [
            {
              "tags": [
                "exploit",
                "vdb-entry",
                "technical-description"
              ],
              "url": "https://wpscan.com/vulnerability/6cad602b-7414-4867-8ae2-f0b846c4c8f0"
            }
          ],
          "source": {
            "discovery": "EXTERNAL"
          },
          "title": "BestWebSoft\u0027s Like \u0026 Share \u003c 2.74 - Unauthenticated Password Protected Post Read",
          "x_generator": {
            "engine": "WPScan CVE Generator"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "assignerShortName": "WPScan",
        "cveId": "CVE-2023-6250",
        "datePublished": "2023-12-26T18:33:11.036Z",
        "dateReserved": "2023-11-22T09:41:18.436Z",
        "dateUpdated": "2024-08-02T08:21:18.094Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }