Description
The Simple Author Box WordPress plugin before 2.52 does not verify a user ID before outputting information about that user, leading to arbitrary user information disclosure to users with a role as low as Contributor.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Simple Author Box | < 2.52 | 2.52 |
References
- https://wpscan.com/vulnerability/c0cc513e-c306-4920-9afb-e33d95a7292f exploit vdb-entry technical-description