← Back

CVE-2024-1088

nvd nist
Published: Mar 5, 2024Modified: Apr 8, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: security@wordfence.com (Secondary)

Description

The Password Protected Store for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2 via the REST API. This makes it possible for unauthenticated attackers to extract sensitive data including post titles and content.

Affected (1)

Rajkakadiya
1 product
Password Protected Store For Woocommerce
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Password Protected Store For Woocommerce
Before 2.3

Related CWEs

CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (5)

Source: security@wordfence.com
Source: security@wordfence.com
Product
Source: security@wordfence.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Product
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.