CVE-2014-5337 WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps < 2.0.2 - Information Disclosure
MediumCVSS 5.0
EPSS 17.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to password protected posts, which allows remote attackers to obtain sensitive information via an exportarticles action to export/content.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wordpress mobile pack project wordpress mobile pack | <= 2.0.1 | No fix listed |
| wordpress mobile pack project wordpress mobile pack | = 1.2.0 | No fix listed |
| wordpress mobile pack project wordpress mobile pack | = 1.2.0-b | No fix listed |
| wordpress mobile pack project wordpress mobile pack | = 1.2.0-b2 | No fix listed |
| wpmobilepack wordpress mobile pack | = 1.0.8223 | No fix listed |
| wpmobilepack wordpress mobile pack | = 1.1.1 | No fix listed |
| wpmobilepack wordpress mobile pack | = 1.1.2 | No fix listed |
| wpmobilepack wordpress mobile pack | = 1.1.3 | No fix listed |
| wpmobilepack wordpress mobile pack | = 1.1.9 | No fix listed |
| wpmobilepack wordpress mobile pack | = 1.1.91 | No fix listed |
| wpmobilepack wordpress mobile pack | = 1.1.92 | No fix listed |
| wpmobilepack wordpress mobile pack | = 1.2.1 | No fix listed |
| wpmobilepack wordpress mobile pack | = 1.2.3 | No fix listed |
| wpmobilepack wordpress mobile pack | = 1.2.4 | No fix listed |
| wpmobilepack wordpress mobile pack | = 1.2.5 | No fix listed |
| wpmobilepack wordpress mobile pack | = 2.0 | No fix listed |
| wordpress-mobile-pack(WordPress) | < 2.0.2 | 2.0.2 |
References
- 60584 third-party-advisory
- wordpress.org patch
- 69292 vdb-entry
- security.dxw.com exploit
- Wordfence Intelligence third-party-advisory
- www.cve.org