CVE-2015-9269 WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps < 2.1.3 - Sensitive Information Exposure
HighCVSS 7.5
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The export/content.php exportarticle feature in the wordpress-mobile-pack plugin before 2.1.3 2015-06-03 for WordPress allows remote attackers to obtain sensitive information because the content of a privately published post is sent in JSON format.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wpmobilepack wordpress mobile pack | < 2.1.3 | 2.1.3 |
| wordpress-mobile-pack(WordPress) | < 2.1.3 | 2.1.3 |
References
- seclists.org exploit mailing-list third-party-advisory
- wordpress.org release-notes third-party-advisory
- www.openwall.com mailing-list third-party-advisory
- Wordfence Intelligence third-party-advisory
- www.cve.org