CVE-2023-4036 | BDVDB-2026-210651 Detail

Description#

The Simple Blog Card WordPress plugin before 1.32 does not ensure that posts to be displayed via a shortcode are public, allowing any authenticated users, such as subscriber, to retrieve arbitrary post title and their content such as draft, private and password protected ones

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-08-30Record published in the CVE List.
2. Version 22025-05-02Most recent update recorded in the CVE List.