Vulnerability Details CVE-2024-2950
The BoldGrid Easy SEO – Simple and Effective SEO plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.6.14 via meta information (og:description) This makes it possible for unauthenticated attackers to view the first 130 characters of a password protected post which can contain sensitive information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 55.7%
CVSS Severity
CVSS v3 Score 5.3
References
- https://plugins.trac.wordpress.org/browser/boldgrid-easy-seo/tags/1.6.15/includes/class-boldgrid-seo-admin.php?rev=3064911
- https://www.wordfence.com/threat-intel/vulnerabilities/id/d502e617-a59f-4385-b050-3702a1b1ed7e?source=cve
- https://plugins.trac.wordpress.org/browser/boldgrid-easy-seo/tags/1.6.15/includes/class-boldgrid-seo-admin.php?rev=3064911
- https://www.wordfence.com/threat-intel/vulnerabilities/id/d502e617-a59f-4385-b050-3702a1b1ed7e?source=cve
Products affected by CVE-2024-2950
-
cpe:2.3:a:boldgrid:easy_seo:-
-
cpe:2.3:a:boldgrid:easy_seo:1.5.1
-
cpe:2.3:a:boldgrid:easy_seo:1.6.0
-
cpe:2.3:a:boldgrid:easy_seo:1.6.1
-
cpe:2.3:a:boldgrid:easy_seo:1.6.10
-
cpe:2.3:a:boldgrid:easy_seo:1.6.11
-
cpe:2.3:a:boldgrid:easy_seo:1.6.12
-
cpe:2.3:a:boldgrid:easy_seo:1.6.13
-
cpe:2.3:a:boldgrid:easy_seo:1.6.14
-
cpe:2.3:a:boldgrid:easy_seo:1.6.2
-
cpe:2.3:a:boldgrid:easy_seo:1.6.3
-
cpe:2.3:a:boldgrid:easy_seo:1.6.4
-
cpe:2.3:a:boldgrid:easy_seo:1.6.5
-
cpe:2.3:a:boldgrid:easy_seo:1.6.6
-
cpe:2.3:a:boldgrid:easy_seo:1.6.7
-
cpe:2.3:a:boldgrid:easy_seo:1.6.8
-
cpe:2.3:a:boldgrid:easy_seo:1.6.9