Information disclosure in Jmlapam Jm Twitter Cards
CVE-2024-1769
The JM Twitter Cards plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 14 via the meta description data. This makes it possible for unauthenticated attackers to view password protected post content when viewing the page source.
Vulnerability class: Information Disclosure
EPSS: 0.006 (46.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Jmlapam Jm Twitter Cards — versions 0
- Jmlapam Jm_twitter_cards
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security@wordfence.com (Third Party Advisory)
- security@wordfence.com (Product)
- security@wordfence.com
Frequently asked questions
- What is CVE-2024-1769?
- CVE-2024-1769 is a medium-severity vulnerability in Jmlapam Jm Twitter Cards, classified under Information Disclosure. CVSS score: 5.3/10. Published 2024-03-05.
- How severe is CVE-2024-1769?
- Medium severity. CVSS v3 base score is 5.3 out of 10.
- Is CVE-2024-1769 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.