CVE-2024-0437: Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease <= 2.6.6 - Missing Authorization to Sensitive Information Exposure
The Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.6 via the API. This makes it possible for authenticated attackers, with subscriber access or higher, to extract post titles and content, thus bypassing the plugin's password protection.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0437?
The severity of CVE-2024-0437 is classified as high due to the potential for sensitive information exposure.
How do I fix CVE-2024-0437?
To fix CVE-2024-0437, update the Password Protected – Ultimate Plugin to version 2.6.7 or later.
Who is affected by CVE-2024-0437?
Authenticated users of all versions of the Password Protected – Ultimate Plugin up to and including 2.6.6 are affected by CVE-2024-0437.
What type of vulnerability is CVE-2024-0437?
CVE-2024-0437 is a vulnerability classified as Sensitive Information Exposure.
Can CVE-2024-0437 be exploited remotely?
CVE-2024-0437 requires authenticated access, making it exploitable by authenticated attackers.