CVE-2024-8483

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
25/09/2024
Last modified:
02/10/2024

Description

The MAS Static Content plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.8 via the static_content() function. This makes it possible for authenticated attackers, with contributor-level access and above, to extract potentially sensitive information from private static content pages.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:madrasthemes:mas_static_content:*:*:*:*:*:wordpress:*:* 1.0.9 (excluding)