CVE-2024-10285

creationtimestamp| type| source ---|---|--- 2024-11-09 02:39:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113450679730462510 2024-11-09 04:55:26+00:00| seen| https://t.me/cvedetector/10261 2025-01-29 19:18:36+00:00| published-proof-of-concept|...

CVE-2024-10285 CE21 Suite <= 2.2.0 - JWT Token Disclosure

The CE21 Suite plugin for WordPress is vulnerable to sensitive information disclosure via the plugin-log.txt in versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to log in the user associated with the JWT token...

WordPress CE21 Suite Plugin <= 2.2.0 is vulnerable to Sensitive Data Exposure

Software CE21 Suite Type Plugin Vulnerable versions = 2.2.0 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Sensitive Data Exposure CVE CVE-2024-10285 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 6f3d12b67220 Credits István Márton Required privilege...