Vulnerability · Published Oct 16, 2023 · Assigned by WPScan
CVE-2023-3707ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Content Disclosure
Medium 4.3
In plain English
A medium-severity security flaw in ActivityPub from Unknown. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).
Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.6%top 52.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
The ActivityPub WordPress plugin before 1.0.0 does not ensure that post contents to be displayed are public and belong to the plugin, allowing any authenticated user, such as subscriber to retrieve the content of arbitrary post (such as draft and private) via an IDOR vector. Password protected posts are not affected by this issue.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | ActivityPub | 0 – before 1.0.0 |
References
- https://wpscan.com/vulnerability/541bbe4c-3295-4073-901d-763556269f48 exploit, vdb-entry, technical-description