CVEvulnerability
CVE-2024-3678
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-04-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-862, CWE-922
Description
The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.4.2. This makes it possible for unauthenticated attackers to view limited information from password protected posts.
Affected configurations
• adenion blog2social (< 7.5.0)
Related
References
- https://plugins.trac.wordpress.org/changeset/3069574/blog2social/trunk/includes/Meta.php Patch
- https://plugins.trac.wordpress.org/changeset/3074883/blog2social/trunk/includes/Meta.php Patch
- https://www.wordfence.com/threat-intel/vulnerabilities/id/2dea1bcb-14c2-4ec9-8a4d-087bac2db486?source=cve Third Party Advisory
- https://plugins.trac.wordpress.org/changeset/3069574/blog2social/trunk/includes/Meta.php Patch
- https://plugins.trac.wordpress.org/changeset/3074883/blog2social/trunk/includes/Meta.php Patch
- https://www.wordfence.com/threat-intel/vulnerabilities/id/2dea1bcb-14c2-4ec9-8a4d-087bac2db486?source=cve Third Party Advisory