CVE-2023-1371

PoC —

CVSS 3.1

6.5 medium

EPSS

<1%p49

Published

Apr 17, 2023 (Apr 17, 2023)

Modified

Jun 17, 2026

Description

The W4 Post List WordPress plugin before 2.4.6 does not ensure that password protected posts can be accessed before displaying their content, which could allow any authenticated users to access them

Vendors: w4 post list project
Products: w4 post list
Ecosystems: WordPress
Weakness: CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.