Executive Summary

The vulnerability in the Authors List plugin for WordPress allows authenticated users with Contributor-level access or higher to exploit an arbitrary method call in the Authors_List_Shortcode class. This enables them to extract sensitive user information such as password hashes, email addresses, usernames, and activation keys by using specially crafted shortcode attributes.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to sensitive information exposure, allowing attackers with certain access levels to obtain confidential user data like password hashes and email addresses. This could result in unauthorized access, user impersonation, or further attacks on the affected WordPress site.

Useful 0 Not Useful 0