Description
The AppPresser WordPress plugin before 5.0.0 does not restrict access to two of its REST API endpoints, allowing unauthenticated visitors to retrieve the installed versions of AppPresser, its add-ons, several third-party AppPresser WordPress plugin before 5.0.0 and its .
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | AppPresser | < 5.0.0 | 5.0.0 |
References
- https://wpscan.com/vulnerability/674849e9-44ad-496f-baba-6d17d58b5807/ exploit vdb-entry technical-description