Description
WordPress Plugin Visual Link Preview is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently get the titles of password-protected posts, or search through content of Draft posts. WordPress Plugin Visual Link Preview version 2.2.2 is vulnerable; prior versions are also affected.
Remediation
Update to plugin version 2.2.3 or latest
References
https://sploitus.com/exploit?id=WPEX-ID:854B23D9-E3F8-4835-8D29-140C580F11C9
https://plugins.svn.wordpress.org/visual-link-preview/trunk/readme.txt
Related Vulnerabilities
phpMyAdmin Improper Input Validation Vulnerability (CVE-2016-9858)
ownCloud Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2021-35947)
OpenSSL Improper Input Validation Vulnerability (CVE-2008-5077)
WebLogic CVE-2020-2549 Vulnerability (CVE-2020-2549)
Joomla Improper Authentication Vulnerability (CVE-2022-23795)