CVE-2024-13535

creationtimestamp| type| source ---|---|--- 2025-02-18 05:16:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligiyieucf2h 2025-02-18 07:56:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4742 2025-02-18 11:39:00+00:00| seen|...

CVE-2024-13535

CVE-2024-13535 concerns Actionwear products sync plugin for WordPress. The Wordfence vulnerability entry in the connected docs notes an unauthenticated Full Path Disclosure in versions up to 2.3.2 (initial description mentions up to 2.3.0). The root cause is that composer-setup.php is publicly ac...