What’s Vulnerable › Vulnerabilities

CVE-2023-6250: BestWebSoft's Like & Share < 2.74 - Unauthenticated Password Protected Post Read

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-12-26 · updated 2026-06-17
• Weakness: CWE-312

Description

The BestWebSoft's Like & Share WordPress plugin before 2.74 discloses the content of password protected posts to unauthenticated users via a meta tag

Affected products

• BestWebSoft's Like & Share: before 2.74 — fixed in 2.74

How to fix

Upgrade to a fixed version: BestWebSoft's Like & Share 2.74. Check the vendor advisory for mitigations.

References

• https://wpscan.com/vulnerability/6cad602b-7414-4867-8ae2-f0b846c4c8f0
• https://wpscan.com/vulnerability/6cad602b-7414-4867-8ae2-f0b846c4c8f0

Get alerted when CVE-2023-6250 or the next vulnerability affects your stack