Lucene search

K
prionPRIOn knowledge basePRION:CVE-2024-2107
HistoryMar 12, 2024 - 10:15 p.m.

Design/Logic Flaw

2024-03-1222:15:00
PRIOn knowledge base
www.prio-n.com
5
blossom spa
wordpress
sensitive information exposure
unauthenticated attackers
password-protected posts
scheduled posts.

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

The Blossom Spa theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.4 via generated source. This makes it possible for unauthenticated attackers to extract sensitive data including contents of password-protected or scheduled posts.

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Related for PRION:CVE-2024-2107