CVE-2024-0681

Summary

CVE-2024-0681 is a vulnerability affecting the Protect WP Pages/Posts plugin for WordPress, impacting all versions up to and including 1.3.4. This issue allows unauthenticated attackers to disclose information by accessing protected pages through the REST API, as the plugin does not restrict access effectively. The vendor has chosen not to implement REST API protection for posts and pages, instead opting to add notices in the dashboard and advising users to install the WordPress REST API Authentication plugin for enhanced security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.