Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-0594

The Professional Social Sharing Buttons, Icons & Related Posts WordPress plugin before 9.7.6 does not have proper authorisation check in one of the AJAX action, available to unauthenticated (in v < 9.7.5) and author+ (in v9.7.5) users, allowing them to call it and retrieve various information such as the list of active plugins, various version like PHP, cURL, WP etc.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.643
EPSS Ranking 98.4%
CVSS Severity
CVSS v3 Score 5.3
Products affected by CVE-2022-0594


Contact Us

Shodan ® - All rights reserved