Sharable Password Protected Posts Sensitive Data Exposure Vulnerability

A vulnerability in the Sharable Password Protected Posts WordPress plugin, affecting versions prior to 1.1.1, allows unauthorized access to password-protected posts. This is achieved by using a secret key provided in a GET parameter, which is exposed through the REST API.

Impact

Exploitation of this vulnerability allows unauthorized users to access password-protected posts, bypassing the intended access controls.

Reproduction

To reproduce this vulnerability, create a password-protected post and enable the 'Share post via secret URL' option. Then, access the REST API endpoint for the post to retrieve the secret key from the meta field '_sppp_key'. Finally, add the key as a GET parameter to the post URL to gain access to the protected content.

Remediation

Users are advised to update the Sharable Password Protected Posts plugin to version 1.1.1 or later.