CVE-2024-13818: Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction <= 3.8.3.9 - Sensitive Information Exposure via Log Files
First published: Fri Feb 21 2025(Updated: )
The Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.8.3.9 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information about users contained in the exposed log files.
Credit: security@wordfence.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| WordPress Registration Forms | <=3.8.3.9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-13818?
CVE-2024-13818 is considered a medium severity vulnerability due to its potential for sensitive information exposure.
How do I fix CVE-2024-13818?
To fix CVE-2024-13818, update the WordPress Registration Forms plugin to version 3.8.4 or later.
What versions are affected by CVE-2024-13818?
CVE-2024-13818 affects all versions of the WordPress Registration Forms plugin up to and including 3.8.3.9.
What type of vulnerability is CVE-2024-13818?
CVE-2024-13818 is a sensitive information exposure vulnerability that allows unauthorized access to user data.
Who is affected by CVE-2024-13818?
Any WordPress site using the Registration Forms plugin versions up to 3.8.3.9 may be affected by CVE-2024-13818.
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/weakness
- agent/references
- agent/first-publish-date
- agent/description
- agent/type
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/author
- agent/severity
- agent/source
- agent/tags
- agent/event
- vendor/wordpress
- canonical/wordpress registration forms