Beta

Report

W4 Post List < 2.4.6 is vulnerable to Subscriber+ Password Protected Post Content Disclosure vulnerability

Subscriber
Published
2023-04-12

The W4 Post List plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.4.5 via the post_excerpt function. This can allow authenticated attackers, with subscriber-level permissions and above, to view password protected posts.

CVSS

Score:4.3

Severity:Medium

Version:< 2.4.6

There is a patch available in v2.4.6 and we strongly recommend you update to this version as soon as possible.