CVEvulnerability

CVE-2022-0594

5.3 MEDIUM Published 2022-07-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-07-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-863

Description

The Professional Social Sharing Buttons, Icons & Related Posts WordPress plugin before 9.7.6 does not have proper authorisation check in one of the AJAX action, available to unauthenticated (in v < 9.7.5) and author+ (in v9.7.5) users, allowing them to call it and retrieve various information such as the list of active plugins, various version like PHP, cURL, WP etc.

Affected configurations

• shareaholic shareaholic (< 9.7.6)

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References