💣Exploit CVE-2024-12294 - WordPress WPBeginner Sensitive Information Exposure Vulnerability

[Maksim]

CVE ID : CVE-2024-12294
Published : Dec. 11, 2024, 11:15 a.m. | 31 minutes ago
Description : The Last Viewed Posts by WPBeginner plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.1 via the 'get_legacy_cookies' function. This makes it possible for unauthenticated attackers to extract sensitive data including titles and permalinks of private, password-protected, pending, and draft posts.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.