CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
The WPUpper Share Buttons plugin for WordPress is vulnerable to unauthorized access of data when preparing sharing links for posts and pages in all versions up to, and including, 3.43. This makes it possible for unauthenticated attackers to obtain the contents of password protected posts and pages.
Explanation of Vulnerability in Simple Terms
WPUpper Share Buttons versions 3.43 and earlier lack proper authorization checks, allowing unauthenticated attackers to access sensitive functionality over the network. The vulnerability exposes limited confidential information without requiring user interaction or special conditions. Site administrators should update to a version newer than 3.43 to mitigate this exposure.
What an attacker can do
Read limited sensitive data from the plugin without authentication.
Potential impact on your site
Unauthenticated visitors can access restricted plugin features and view non-public information.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
