CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.3. It affects WordPress.
CVE
CVE-2022-0594
Severity
MEDIUM
CVSS
5.3
EPSS
2.01%
WordPress
Original NVD Description
The Professional Social Sharing Buttons, Icons & Related Posts WordPress plugin before 9.7.6 does not have proper authorisation check in one of the AJAX action, available to unauthenticated (in v < 9.7.5) and author+ (in v9.7.5) users, allowing them to call it and retrieve various information such as the list of active plugins, various version like PHP, cURL, WP etc.
Related CVEs
Other vulnerabilities affecting the same vendor(s)