Vulnerability · Published Oct 16, 2023 · Assigned by WPScan
CVE-2023-3706ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Title Disclosure
Medium 4.3
In plain English
A medium-severity security flaw in ActivityPub from Unknown. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).
Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.6%top 52.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
The ActivityPub WordPress plugin before 1.0.0 does not ensure that post titles to be displayed are public and belong to the plugin, allowing any authenticated user, such as subscriber to retrieve the title of arbitrary post (such as draft and private) via an IDOR vector
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | ActivityPub | 0 – before 1.0.0 |
References
- https://wpscan.com/vulnerability/daa4d93a-f8b1-4809-a18e-8ab63a05de5a exploit, vdb-entry, technical-description