CVE-2024-2795

SEO SIMPLE PACK <= 3.2.1 - Information Exposure

CVSS 5.3 MEDIUMEPSS 0.5%CWE-200

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 5.3EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

28 jun 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

The SEO SIMPLE PACK plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.2.1 via META description. This makes it possible for unauthenticated attackers to extract limited information about password protected posts.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Produtos afetados

looswebstudio · SEO SIMPLE PACK

Referências

https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3109539%40seo-simple-pack&new=3109539%40seo-simple-pack&sfp_email=&sfph_mail=https://wordpress.org/plugins/seo-simple-pack/https://www.wordfence.com/threat-intel/vulnerabilities/id/f62a9ca0-7077-410f-b005-175348acd133?source=cve