CVE-2024-1984: Graphene <= 2.9.2 - Missing Authorization
The Graphene theme for WordPress is vulnerable to unauthorized access of data via meta tag in all versions up to, and including, 2.9.2. This makes it possible for unauthenticated individuals to obtain post contents of password protected posts via the generated source.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-1984?
CVE-2024-1984 is considered a medium severity vulnerability due to its potential for unauthorized access to protected post content.
How do I fix CVE-2024-1984?
To fix CVE-2024-1984, update the Graphene theme to version 2.9.3 or later.
Who is affected by CVE-2024-1984?
Any WordPress site using the Graphene theme version 2.9.2 or earlier is affected by CVE-2024-1984.
What type of vulnerability is CVE-2024-1984?
CVE-2024-1984 is an unauthorized access vulnerability that allows users to access protected post content.
Can CVE-2024-1984 be exploited by unauthenticated users?
Yes, CVE-2024-1984 can be exploited by unauthenticated users, allowing them to view restricted content.