CVE-2024-2107CWE-862

Blossom Spa <= 1.3.3 - Sensitive Information Exposure

Medium · published March 12, 2024

CVSS v3.1
5.8
EPSS
0%
Percentile
40.0
In the wild
Unconfirmed
What it is

The Blossom Spa theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.3 via generated source. This makes it possible for unauthenticated attackers to extract sensitive data including contents of password-protected or scheduled posts.

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00474 · 40.0th percentile
Weakness
CWE-862 · Missing Authorization
Published
2024-03-12T21:34Z
EPSS history
Timeline
  • 12 MAR 21:34Z
    Blossom Spa <= 1.3.3 - Sensitive Information Exposure
    cvelistv5