CVE-2024-10937: Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins <= 2.0.58 - Sensitive Information Exposure
The Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.58 via the wpajaxnoprivrelatedpostajaxgetpostids AJAX action. This makes it possible for unauthenticated attackers to extract sensitive data including titles of posts in draft status.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10937?
CVE-2024-10937 is classified as a sensitive information exposure vulnerability.
How do I fix CVE-2024-10937?
To fix CVE-2024-10937, update the Related Posts, Inline Related Posts, Contextual Related Posts, Related Content plugin to version 2.0.59 or higher.
What versions are affected by CVE-2024-10937?
CVE-2024-10937 affects all versions of the plugin up to and including 2.0.58.
Can CVE-2024-10937 be exploited by unauthenticated users?
Yes, CVE-2024-10937 can be exploited by unauthenticated users through the wp_ajax_nopriv_related_post_ajax_get_post_ids AJAX action.
What kind of data is at risk with CVE-2024-10937?
CVE-2024-10937 poses a risk of exposing sensitive information due to improper handling of AJAX requests.