CVE-2024-13818: Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction <= 3.8.4 - Sensitive Information Exposure via Log Files
The Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.8.4 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information about users contained in the exposed log files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-13818?
CVE-2024-13818 is considered a medium severity vulnerability due to its potential for sensitive information exposure.
How do I fix CVE-2024-13818?
To fix CVE-2024-13818, update the WordPress Registration Forms plugin to version 3.8.4 or later.
What versions are affected by CVE-2024-13818?
CVE-2024-13818 affects all versions of the WordPress Registration Forms plugin up to and including 3.8.3.9.
What type of vulnerability is CVE-2024-13818?
CVE-2024-13818 is a sensitive information exposure vulnerability that allows unauthorized access to user data.
Who is affected by CVE-2024-13818?
Any WordPress site using the Registration Forms plugin versions up to 3.8.3.9 may be affected by CVE-2024-13818.