CVE-2024-11089

CVE-2024-11089 refers to the WordPress plugin Anonymous Restricted Content (WordPress.org) and is an unauthenticated exposure vulnerability. All versions up to and including 1.6.5 allow an attacker to use the WordPress core search feature to retrieve sensitive information from posts that were res...

CVE-2024-11089 Anonymous Restricted Content <= 1.6.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure

The Anonymous Restricted Content plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.5 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been...

WordPress Anonymous Restricted Content Plugin <= 1.6.5 is vulnerable to Sensitive Data Exposure

Software Anonymous Restricted Content Type Plugin Vulnerable versions = 1.6.5 Fixed in 1.6.6 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-11089 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 8caf92a3582b Credits Francesco...