The Social Sharing Plugin – Kiwi plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.1.7 via the kiwi-nw-pinterest class. This makes it possible for unauthenticated attackers to view limited content from password protected posts.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Kiwi_social_share | Wpkube | * | 2.1.8 (excluding) |