CVE-2024-10937

CVSS V2 None CVSS V3 None
Description
The Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.58 via the wp_ajax_nopriv_related_post_ajax_get_post_ids AJAX action. This makes it possible for unauthenticated attackers to extract sensitive data including titles of posts in draft status.
Overview
  • CVE ID
  • CVE-2024-10937
  • Assigner
  • Wordfence
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-12-05T08:23:59.347Z
  • Last Modified Date
  • 2024-12-05T11:26:42.636Z
History
Created Old Value New Value Data Type Notes
2024-12-06 13:14:18 Added to TrackCVE