| |
Vulnerability CVE-2024-8195
Published: 2024-08-28
| Description: |
The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'debug_data', 'debug_query', and 'debug_redirect' functions in all versions up to, and including, 2.4.4. This makes it possible for unauthenticated attackers to extract sensitive data including password, title, and content of password-protected posts. |
Type:
CWE-862 (Missing Authorization)
References: |
https://www.wordfence.com/threat-intel/vulnerabilities/id/aadf1d59-60ba-4da2-adbb-4e84d587a34d?source=cve
https://plugins.trac.wordpress.org/browser/permalink-manager/tags/2.4.4/includes/core/permalink-manager-debug.php#L70
https://plugins.trac.wordpress.org/changeset/3142479/
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
