CVEvulnerability
CVE-2014-5337
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-08-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to password protected posts, which allows remote attackers to obtain sensitive information via an exportarticles action to export/content.php.
Affected configurations
• wordpress mobile pack project wordpress mobile pack (<= 2.0.1)
• wordpress mobile pack project wordpress mobile pack 1.2.0
• wpmobilepack wordpress mobile pack 1.0.8223
• wpmobilepack wordpress mobile pack 1.1.1
• wpmobilepack wordpress mobile pack 1.1.2
• wpmobilepack wordpress mobile pack 1.1.3
• wpmobilepack wordpress mobile pack 1.1.9
• wpmobilepack wordpress mobile pack 1.1.91
• wpmobilepack wordpress mobile pack 1.1.92
• wpmobilepack wordpress mobile pack 1.2.1
• wpmobilepack wordpress mobile pack 1.2.3
• wpmobilepack wordpress mobile pack 1.2.4
• wpmobilepack wordpress mobile pack 1.2.5
• wpmobilepack wordpress mobile pack 2.0
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/60584 secunia.com
- http://wordpress.org/plugins/wordpress-mobile-pack/changelog/ Patch
- http://www.securityfocus.com/bid/69292 www.securityfocus.com
- https://security.dxw.com/advisories/information-disclosure-vulnerability-in-wordpress-mobile-pack-allows-anybody-to-read-password-protected-posts/ Exploit
- http://secunia.com/advisories/60584 secunia.com
- http://wordpress.org/plugins/wordpress-mobile-pack/changelog/ Patch
- http://www.securityfocus.com/bid/69292 www.securityfocus.com
- https://security.dxw.com/advisories/information-disclosure-vulnerability-in-wordpress-mobile-pack-allows-anybody-to-read-password-protected-posts/ Exploit