ByteOS Network

NVD Vulnerability Details :

CVE-2024-1479

Analyzed

Source-security@wordfence.com

Published At-13 Mar, 2024 | 16:15

Updated At-06 Mar, 2025 | 14:24

The WP Show Posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.4 via the wpsp_display function. This makes it possible for authenticated attackers with contributor access and above to view the contents of draft, trash, future, private and pending posts and pages.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CPE Matches

generatepress>>wp_show_posts>>Versions before 1.1.5(exclusive)

cpe:2.3:a:generatepress:wp_show_posts:*:*:*:*:*:wordpress:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Secondary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://plugins.trac.wordpress.org/browser/wp-show-posts/trunk/wp-show-posts.php#L224	security@wordfence.com	Product
https://plugins.trac.wordpress.org/browser/wp-show-posts/trunk/wp-show-posts.php#L591	security@wordfence.com	Product
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3041416%40wp-show-posts%2Ftrunk&old=2846296%40wp-show-posts%2Ftrunk&sfp_email=&sfph_mail=	security@wordfence.com	Patch
https://www.wordfence.com/threat-intel/vulnerabilities/id/6788e2ee-ce61-494b-8d7f-6d1144466e58?source=cve	security@wordfence.com	Third Party Advisory
https://plugins.trac.wordpress.org/browser/wp-show-posts/trunk/wp-show-posts.php#L224	af854a3a-2127-422b-91ae-364da2661108	Product
https://plugins.trac.wordpress.org/browser/wp-show-posts/trunk/wp-show-posts.php#L591	af854a3a-2127-422b-91ae-364da2661108	Product
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3041416%40wp-show-posts%2Ftrunk&old=2846296%40wp-show-posts%2Ftrunk&sfp_email=&sfph_mail=	af854a3a-2127-422b-91ae-364da2661108	Patch
https://www.wordfence.com/threat-intel/vulnerabilities/id/6788e2ee-ce61-494b-8d7f-6d1144466e58?source=cve	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History