Description
WordPress Shareaholic 插件存在信息泄露漏洞，此漏洞是在Ajax执行时没有做合适的权限认证导致的。
WordPress Shareaholic 插件 CVE-2022-0594 信息泄露漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2022-0594
https://pentest-tools.com/vulnerabilities-exploits/wordpress-shareaholic-976-information-disclosure_2475
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/shareaholic
https://hackhalt.com/threat/cve-2022-0594/
https://s4e.io/tools/wordpress-shareaholic-9-7-6-information-disclosure-cve-2022-0594
https://vulnerability.circl.lu/vuln/cve-2022-0594
https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2022-0594
https://www.ddpoc.com/DVB-2022-3916.html
https://stack.chaitin.com/poc/detail/992
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0594.yaml
https://wordpress.org/plugins/shareaholic/
https://notifications.qualys.com/product/2022/10/03/september-2022-web-application-vulnerabilities-released
https://attackerkb.com/topics/23f24841-9e9a-4dba-900f-551121972b08
https://app.opencve.io/cve/?page=773&search=wordpress
https://www.reddit.com/r/cybersecurity/comments/1gd3xju/over_6000_wordpress_sites_hacked_to_install/