CVE-2024-0212CWE-284

Cloudflare WordPress plugin enables information disclosure of Cloudflare API (for low privileged users)

High · published January 29, 2024

CVSS v3.1
8.1
EPSS
1%
Percentile
56.2
In the wild
Unconfirmed
What it is

The Cloudflare Wordpress plugin was found to be vulnerable to improper authentication. The vulnerability enables attackers with a lower privileged account to access data from the Cloudflare API.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00801 · 56.2th percentile
Weakness
CWE-284 · Improper Access Control
Published
2024-01-29T09:13Z
EPSS history
Timeline
  • 29 JAN 09:13Z
    Cloudflare WordPress plugin enables information disclosure of Cloudflare API (for low privileged users)
    cvelistv5