CVE-2024-12103
Medium
Description
The Content No Cache: prevent specific content from being cached plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 0.1.2 via the eos_dyn_get_content action due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected, private, or draft posts that they should not have access to.
SeverityMedium
CVSS5.3
Exploit probability—
ProductContent No Cache | Serve uncached partial content even when you add it to a page that is fully cached.
PublishedDec 24, 2024
First seenDec 24, 2024
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| giuse Content No Cache | Serve uncached partial content even when you add it to a page that is fully cached. | v ≤ 0.1.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.