CVE-2024-3235
Last modified
CVE-2024-3235 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. The Essential Grid Gallery WordPress Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.1 via the on_front_ajax_action() function. This makes it possible for unauthenticated attackers to view private and password protected posts that may have private or sensitive information.. EPSS estimates a 0.69% chance of exploitation in the next 30 days.
Description
The Essential Grid Gallery WordPress Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.1 via the on_front_ajax_action() function. This makes it possible for unauthenticated attackers to view private and password protected posts that may have private or sensitive information.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-3235?
How severe is CVE-2024-3235?
How do I fix CVE-2024-3235?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-32341Multiple cross-site scripting (XSS) vulnerabilities in the H…5.4
- CVE-2024-32342A cross-site scripting (XSS) vulnerability in the Create Pag…6.1
- CVE-2024-32343A cross-site scripting (XSS) vulnerability in the Create Pag…6.1
- CVE-2024-32344A cross-site scripting (XSS) vulnerability in the Settings m…6.8
- CVE-2024-32345A cross-site scripting (XSS) vulnerability in the Settings m…7.2
- CVE-2024-32349TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to co…6
- CVE-2024-32350TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to co…8.8
- CVE-2024-32351TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to co…8.8
- CVE-2024-32352TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to co…8.8
- CVE-2024-32353TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to co…9.8
- CVE-2024-32354TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to co…6
- CVE-2024-32355TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to co…8
Are you affected by CVE-2024-3235?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST