CVE-2024-33922: WordPress WP Media Cleaner plugin <= 6.7.2 - Sensitive Data Exposure via Log File vulnerability
Published May 2, 2024
·Updated
Insertion of Sensitive Information into Log File vulnerability in Jordy Meow WP Media Cleaner.This issue affects WP Media Cleaner: from n/a through 6.7.2.
Affected Software
1 affected component
Jordy Meow WP Media Cleaner<=6.7.2
Remediation
Information
Update to 6.7.3 or a higher version.
Event History
May 2, 2024
CVE Published
via MITRE·11:02 AM
Data Sourced
via MITRE·11:02 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-33922?
CVE-2024-33922 is categorized as a moderate severity vulnerability due to the potential exposure of sensitive information.
2
How do I fix CVE-2024-33922?
To fix CVE-2024-33922, update the WP Media Cleaner plugin to version 6.7.3 or later as recommended by the vendor.
3
Which versions of WP Media Cleaner are affected by CVE-2024-33922?
CVE-2024-33922 affects WP Media Cleaner versions from n/a up to and including 6.7.2.
4
What type of data is exposed in CVE-2024-33922?
CVE-2024-33922 allows for the insertion of sensitive information into log files, which can lead to data leakage.
5
How can I mitigate the risk associated with CVE-2024-33922?
To mitigate the risk of CVE-2024-33922, avoid using the vulnerable versions of the WP Media Cleaner plugin until an update is applied.