| Package | Affected versions | Patched versions |
|---|---|---|
| shareaholic | < 9.7.6 | 9.7.6 |
The Professional Social Sharing Buttons, Icons & Related Posts WordPress plugin before 9.7.6 does not have proper authorisation check in one of the AJAX action, available to unauthenticated (in v < 9.7.5) and author+ (in v9.7.5) users, allowing them to call it and retrieve various information such as the list of active plugins, various version like PHP, cURL, WP etc.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free