CVE-2024-49235: WordPress Contact Forms, Live Support, CRM, Video Messages plugin <= 1.10.2 - Sensitive Data Exposure vulnerability
First published: Thu Oct 17 2024(Updated: )
Insertion of Sensitive Information Into Sent Data vulnerability in VideoWhisper.Com Contact Forms, Live Support, CRM, Video Messages allows Retrieve Embedded Sensitive Data.This issue affects Contact Forms, Live Support, CRM, Video Messages: from n/a through 1.10.2.
Credit: audit@patchstack.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VideoWhisper Contact Forms | <=1.10.2 | |
| VideoWhisper Live Support | <=1.10.2 | |
| VideoWhisper CRM | <=1.10.2 | |
| VideoWhisper Video Messages | <=1.10.2 | |
| WordPress Contact Forms | <=1.10.2 | |
| WordPress Live Support | <=1.10.2 | |
| WordPress CRM | <=1.10.2 | |
| WordPress Video Messages | <=1.10.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-49235?
CVE-2024-49235 is rated as a medium severity vulnerability.
How do I fix CVE-2024-49235?
To fix CVE-2024-49235, upgrade your VideoWhisper software to version 1.10.3 or later.
What software is affected by CVE-2024-49235?
CVE-2024-49235 affects VideoWhisper Contact Forms, Live Support, CRM, and Video Messages versions up to 1.10.2.
What type of vulnerability is CVE-2024-49235?
CVE-2024-49235 is an insertion of sensitive information into sent data vulnerability.
What are the potential impacts of CVE-2024-49235?
The potential impacts of CVE-2024-49235 include the unauthorized retrieval of embedded sensitive data.
- agent/title
- agent/weakness
- agent/references
- agent/description
- agent/first-publish-date
- agent/type
- agent/severity
- agent/author
- agent/event
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- agent/softwarecombine
- collector/epss-latest
- source/FIRST
- agent/source
- agent/epss
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- vendor/videowhisper
- canonical/videowhisper contact forms
- canonical/videowhisper live support
- canonical/videowhisper crm
- canonical/videowhisper video messages
- vendor/wordpress
- canonical/wordpress contact forms
- canonical/wordpress live support
- canonical/wordpress crm
- canonical/wordpress video messages