CVE-2022-0594
Shareaholic < 9.7.6 - Information Disclosure
- State
- Published
- Severity
- Not scored
- Published
- Jul 25, 2022
- Updated
- Aug 2, 2024
- Reserved
- Feb 14, 2022
Description
The Professional Social Sharing Buttons, Icons & Related Posts WordPress plugin before 9.7.6 does not have proper authorisation check in one of the AJAX action, available to unauthenticated (in v < 9.7.5) and author+ (in v9.7.5) users, allowing them to call it and retrieve various information such as the list of active plugins, various version like PHP, cURL, WP etc.
Scores
The record has no CVSS score.
Weaknesses
- CWE-863 Incorrect Authorization
Affected Products
| Product | Versions |
|---|---|
Professional Social Sharing Buttons, Icons & Related Posts – ShareaholicUnknown |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.