Vulnerabilities > CVE-2021-24851 - Missing Authorization vulnerability in Insert Pages Project Insert Pages

CVSS 4.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

SINGLE

Confidentiality impact

PARTIAL

Integrity impact

NONE

Availability impact

NONE

network

low complexity

insert-pages-project

CWE-862

NVD

Published: 2021-11-17

Updated: 2022-08-30

Summary

The Insert Pages WordPress plugin before 3.7.0 allows users with a role as low as Contributor to access content and metadata from arbitrary posts/pages regardless of their author and status (ie private), using a shortcode. Password protected posts/pages are not affected by such issue.

Vulnerable Configurations

Part	Description	Count
Application	Insert_Pages_Project Insert Pages Project Insert Pages - Insert Pages Project Insert Pages 0.5 Insert Pages Project Insert Pages 1.0 Insert Pages Project Insert Pages 1.1 Insert Pages Project Insert Pages 1.2 Insert Pages Project Insert Pages 1.3 Insert Pages Project Insert Pages 1.4 Insert Pages Project Insert Pages 1.5 Insert Pages Project Insert Pages 1.6 Insert Pages Project Insert Pages 1.7 Insert Pages Project Insert Pages 1.8 Insert Pages Project Insert Pages 1.9 Insert Pages Project Insert Pages 2.0 Insert Pages Project Insert Pages 2.1 Insert Pages Project Insert Pages 2.2 Insert Pages Project Insert Pages 2.3 Insert Pages Project Insert Pages 2.4 Insert Pages Project Insert Pages 2.5 Insert Pages Project Insert Pages 2.6 Insert Pages Project Insert Pages 2.7 Insert Pages Project Insert Pages 2.7.1 Insert Pages Project Insert Pages 2.7.2 Insert Pages Project Insert Pages 2.8 Insert Pages Project Insert Pages 2.9 Insert Pages Project Insert Pages 2.9.1 Insert Pages Project Insert Pages 3.0 Insert Pages Project Insert Pages 3.0.1 Insert Pages Project Insert Pages 3.0.2 Insert Pages Project Insert Pages 3.1 Insert Pages Project Insert Pages 3.1.1 Insert Pages Project Insert Pages 3.1.2 Insert Pages Project Insert Pages 3.1.3 Insert Pages Project Insert Pages 3.1.4 Insert Pages Project Insert Pages 3.1.5 Insert Pages Project Insert Pages 3.1.6 Insert Pages Project Insert Pages 3.1.7 Insert Pages Project Insert Pages 3.1.8 Insert Pages Project Insert Pages 3.1.9 Insert Pages Project Insert Pages 3.2.0 Insert Pages Project Insert Pages 3.2.1 Insert Pages Project Insert Pages 3.2.2 Insert Pages Project Insert Pages 3.2.3 Insert Pages Project Insert Pages 3.2.4 Insert Pages Project Insert Pages 3.2.5 Insert Pages Project Insert Pages 3.2.6 Insert Pages Project Insert Pages 3.2.7 Insert Pages Project Insert Pages 3.2.8 Insert Pages Project Insert Pages 3.2.9 Insert Pages Project Insert Pages 3.3.0 Insert Pages Project Insert Pages 3.4.0 Insert Pages Project Insert Pages 3.4.1 Insert Pages Project Insert Pages 3.4.2 Insert Pages Project Insert Pages 3.4.3 Insert Pages Project Insert Pages 3.4.4 Insert Pages Project Insert Pages 3.4.5 Insert Pages Project Insert Pages 3.4.6 Insert Pages Project Insert Pages 3.4.7 Insert Pages Project Insert Pages 3.5.0 Insert Pages Project Insert Pages 3.5.1 Insert Pages Project Insert Pages 3.5.2 Insert Pages Project Insert Pages 3.5.3 Insert Pages Project Insert Pages 3.5.3.1 Insert Pages Project Insert Pages 3.5.3.2 Insert Pages Project Insert Pages 3.5.4 Insert Pages Project Insert Pages 3.5.5 Insert Pages Project Insert Pages 3.5.6 Insert Pages Project Insert Pages 3.5.7 Insert Pages Project Insert Pages 3.5.8 Insert Pages Project Insert Pages 3.5.9 Insert Pages Project Insert Pages 3.5.10 Insert Pages Project Insert Pages 3.6.0 Insert Pages Project Insert Pages 3.6.1	72

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References