地图 / Unauthenticated disclosure of private and hidden forum content in bbPress via the WordPress core REST single-item endpoint

Unauthenticated disclosure of private and hidden forum content in bbPress via the WordPress core REST single-item endpoint

访问控制 / 访问控制缺陷（通用） / #3801107

厂商: WordPress
严重程度: 高危 · CVSS 9.3
赏金: —
弱点: 访问控制缺陷（通用）
研究员: @winstoncrooker
披露日期: 2026-10-12
资产: bbPress Core
CVE: —

该报告还没有中文解读。

原文摘录

摘自原文（9801 字符中的一小部分）

bbPress restricts the topics and replies inside private and hidden forums to authorized members. The current development version (2.7.0) registers the forum, topic, and reply post types with `show_in_rest => true`, which exposes them through the WordPress core REST API. bbPress enforces forum …

默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 WordPress 所有。

时间线

2026-06-14报告提交
2026-10-12公开披露

阅读 HackerOne 原文 ↗作者 @winstoncrooker · 版权归作者与 WordPress 所有

同类报告

Account Takeover via Password Reset without user interactionsGitLab · 2025-02-26 · $35,000 Exfiltrate and mutate repository and project data through injected templated serviceGitLab · 2019-03-05 · $11,000 Getting all the CD keys of any gameValve · 2018-10-31 · $20,000 Ability to reset password for accountUpserve · 2019-06-06 Publicly accessible Continuous Integration ToolSnapchat · 2021-07-29 One-click account hijack for anyone using Apple sign-in with Reddit, due to response-type switch + leaking href to XSS on www.redditmedia.comReddit · 2022-08-02

Unauthenticated disclosure of private and hidden forum content in bbPress via the WordPress core REST single-item endpoint · 破甲 POJIA