PT-2024-30427 · Mediavine · Create By Mediavine

Peng Zhou · Published 2024-08-26 · Updated 2024-09-12 · CVE-2024-43264

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Create by Mediavine versions 1.9.8 and earlier

Description This issue exposes sensitive information to unauthorized actors. Users are urged to upgrade to the latest version to mitigate risks.

Recommendations For versions 1.9.8 and earlier, upgrade to the latest version to resolve the issue. As a temporary workaround, consider restricting access to sensitive data until the upgrade is applied.

Fix

Information Disclosure

Weakness Enumeration

CWE-201

CWE-200

Related Identifiers

CVE-2024-43264

Affected Products

Create By Mediavine

References · 8

• https://osv.dev/vulnerability/CVE-2024-43264 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-43264 · Security Note
• https://twitter.com/CVEnew/status/1828168427069898822 · Twitter Post
• https://patchstack.com/database/vulnerability/mediavine-create/wordpress-create-by-mediavine-plugin-1-9-7-sensitive-data-exposure-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/mediavine-create/vulnerability/wordpress-create-by-mediavine-plugin-1-9-7-sensitive-data-exposure-vulnerability?_s_id=cve · Note
• https://twitter.com/transilienceai/status/1829585478275703003 · Twitter Post
• https://t.me/cvenotify/94381 · Telegram Post
• https://t.me/cvedetector/4218 · Telegram Post