WordPress Plugin Vulnerabilities

WP REST API (WP API) <= 1.2 - Post Revision Disclosure

Description

Unauthenticated users could access revisions of published and unpublished posts. Revisions are now only accessible to authenticated users with permission to edit the revision's post.

Affects Plugins

Plugin icon
json-rest-api
Fixed in 1.2.1

References

URL
https://make.wordpress.org/core/2015/04/09/wp-rest-api-critical-security-release/
URL
http://wp-cli.org/

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
507ac142-dd66-4d38-aa0e-bca53cab44e6

Timeline

Publicly Published
2015-04-09 (about 11 years ago)
Added
2015-04-09 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2023-09-06
Title
Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page)
Published
2019-05-06
Title
W3 Total Cache < 0.9.7.4 - Cryptographic Signature Bypass
Published
2024-04-05
Title
Captcha by BestWebSoft < 5.2.1 - Captcha Bypass
Published
2016-02-08
Title
WooCommerce - Store Toolkit Plugin <= 1.5.6 - Privilege Escalation
Published
2020-01-27
Title
WPS Hide Login < 1.5.5 - Secret Login Page Disclosure