CVE-2024-1984CWE-862

Graphene <= 2.9.2 - Missing Authorization

Medium · published April 9, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
43.5
In the wild
Unconfirmed
What it is

The Graphene theme for WordPress is vulnerable to unauthorized access of data via meta tag in all versions up to, and including, 2.9.2. This makes it possible for unauthenticated individuals to obtain post contents of password protected posts via the generated source.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00523 · 43.5th percentile
Weakness
CWE-862 · Missing Authorization
Published
2024-04-09T18:59Z
EPSS history
Timeline
  • 09 APR 18:59Z
    Graphene <= 2.9.2 - Missing Authorization
    cvelistv5