WordPress Plugin Vulnerabilities
Social Metrics Tracker <= 1.6.8 - Unauthorised Data Export
Description
The lack of proper authorisation when exporting data from the plugin could allow unauthenticated users to get information about the posts and page of the blog, including their author's username and email.
The plugin is still affected and has been closed.
Proof of Concept
Affects Plugins
No known fix Miscellaneous
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2019-09-18 (about 6 years ago)
Added
2020-03-02 (about 5 years ago)
Last Updated
2020-03-02 (about 5 years ago)
WPScan 