CVE-2023-6257

Published: Apr 11, 2024Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

The Inline Related Posts WordPress plugin before 3.6.0 is missing authorization in an AJAX action to ensure that users are allowed to see the content of the posts displayed, allowing any authenticated user, such as subscriber to retrieve the content of password protected posts

Affected (1)

Products: Data443: Inline Related Posts

Data443

1 product

Inline Related Posts

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Data443 Inline Related Posts	Before 3.6.0

References (2)

https://wpscan.com/vulnerability/19a86448-8d7c-4f02-9290-d9f93810e6e1/

Source: contact@wpscan.com

ExploitThird Party Advisory

https://wpscan.com/vulnerability/19a86448-8d7c-4f02-9290-d9f93810e6e1/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.