CVE-2024-38756

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Weblizar Coming Soon allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Coming Soon: from n/a through 1.6.3...

CVE-2024-38756

CVE-2024-38756 affects Weblizar Coming Soon (WordPress plugin) 1.6.3 and earlier. Root cause: access to restricted functionality allowed by ACL misconfig, leading to exposure of sensitive information to unauthorized actors. Impact: information disclosure. Mitigation: upgrade to a version later th...

WordPress Coming Soon Plugin <= 1.6.3 is vulnerable to Sensitive Data Exposure

Software Coming Soon Type Plugin Vulnerable versions = 1.6.3 Fixed in N/A OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-38756 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 722374741f1c Credits Joshua Chan...