CVE-2024-43258

Published: Aug 26, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Store Locator Plus.This issue affects Store Locator Plus: from n/a through 2311.17.01.

Affected (1)

Products: Storelocatorplus: Store Locator Plus

Storelocatorplus

1 product

Store Locator Plus

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Storelocatorplus Store Locator Plus	Up to 2311.17.01

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (1)

https://patchstack.com/database/vulnerability/store-locator-le/wordpress-store-locator-plus-for-wordpress-plugin-2311-17-01-sensitive-data-exposure-vulnerability?_s_id=cve

Source: audit@patchstack.com

Third Party Advisory

Timeline

No history available yet.