CVE-2024-31249CWE-532

CVE-2024-31249

Medium · published April 10, 2024

CVSS v3.1

5.3

EPSS

Percentile

42.9

In the wild

Unconfirmed

What it is

Insertion of Sensitive Information into Log File vulnerability in WPKube Subscribe To Comments Reloaded.This issue affects Subscribe To Comments Reloaded: from n/a through 220725.

The record

Technical detail

CVSS v3.1: 5.3 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.00514 · 42.9th percentile
Weakness: CWE-532 · Insertion of Sensitive Information into Log File
Published: 2024-04-10T20:15Z

Affected products (1)

Product	Versions	Fixed in
wpkube/subscribe_to_comments_reloaded	< 240119	240119

References (2)

https://patchstack.com/database/vulnerability/subscribe-to-comments-reloaded/wordpress-subscribe-to-comments-reloaded-plugin-220725-sensitive-data-exposure-vulnerability?_s_id=cve · [email protected]https://patchstack.com/database/vulnerability/subscribe-to-comments-reloaded/wordpress-subscribe-to-comments-reloaded-plugin-220725-sensitive-data-exposure-vulnerability?_s_id=cve · af854a3a-2127-422b-91ae-364da2661108

EPSS history

Timeline

10 APR 15:48Z
WordPress Subscribe To Comments Reloaded plugin <= 220725 - Sensitive Data Exposure vulnerability
cvelistv5