CyberRota Analysis
AI-GeneratedThe Smart Post plugin for WordPress versions prior to 4.0.8 is vulnerable as it fails to verify if a post is password-protected before exposing its content and associated password through an unauthenticated AJAX request. This flaw allows unauthorized users to access sensitive information, potentially compromising the privacy of protected posts. WordPress site administrators using this plugin should prioritize updating to mitigate the risk of unauthorized content exposure.
Original NVD Description
The Smart Post WordPress plugin before 4.0.8 does not check whether a post is password protected before returning its content and its stored password through an unauthenticated AJAX action, allowing unauthenticated users to read protected post content and the password that guards it.