CVE-2024-3679: Premium SEO Pack – WP SEO Plugin <= 1.6.002 - Unauthenticated Information Exposure
Published Aug 29, 2024
·Updated
The Premium SEO Pack – WP SEO Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.002. This makes it possible for unauthenticated attackers to view limited information from password protected posts through the social meta data.
Affected Software
1 affected component
Squirrly Wp Seo Plugin Wordpress<=1.6.001
Event History
Aug 29, 2024
CVE Published
via MITRE·12:31 PM
Data Sourced
via MITRE·12:31 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-3679?
CVE-2024-3679 is classified as a sensitive information exposure vulnerability.
2
How do I fix CVE-2024-3679?
To fix CVE-2024-3679, update the Premium SEO Pack – WP SEO Plugin to version 1.6.002 or later.
3
Who is affected by CVE-2024-3679?
All users of the Premium SEO Pack – WP SEO Plugin for WordPress up to and including version 1.6.001 are affected by CVE-2024-3679.
4
What information can attackers access through CVE-2024-3679?
Attackers can view limited information from password protected posts due to CVE-2024-3679.
5
Is CVE-2024-3679 exploitable by authenticated users?
No, CVE-2024-3679 is exploitable by unauthenticated attackers.