CVE-2024-0212 Cloudflare WordPress plugin enables information disclosure of Cloudflare API (for low privileged users)

The Cloudflare Wordpress plugin was found to be vulnerable to improper authentication. The vulnerability enables attackers with a lower privileged account to access data from the Cloudflare API...

CVE-2024-0212

The CVE-2024-0212 entry concerns the WordPress Cloudflare plugin. Concrete details from connected sources show: versions up to 4.12.2 are vulnerable due to a missing capability check in the initProxy function, allowing authenticated users with subscriber access and above to send requests proxied ...

CVE-2024-0212 Cloudflare WordPress plugin enables information disclosure of Cloudflare API (for low privileged users)

The Cloudflare Wordpress plugin was found to be vulnerable to improper authentication. The vulnerability enables attackers with a lower privileged account to access data from the Cloudflare API...