CVE-2024-35682 WordPress Otter Blocks PRO plugin <= 2.6.11 - Authenticated Sensitive Data Exposure vulnerability
Authenticated attackers can access sensitive information in the Otter Blocks PRO WordPress plugin, requiring an upgrade to mitigate.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-35682?
CVE-2024-35682 is a medium-severity vulnerability in Themeisle Otter Blocks PRO, published on 8 Jun 2024. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Themeisle Otter Blocks PRO.This issue affects Otter Blocks PRO: from n/a through 2.6.11.
Weakness: CWE-200
Which versions are affected by CVE-2024-35682?
It affects 1 product.
Products include Themeisle Otter Blocks.
How do I fix CVE-2024-35682?
No fix has been published for CVE-2024-35682 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-35682 being exploited?
There is no known exploitation of CVE-2024-35682 in the wild and no public exploit code.
Other vulnerabilities in Themeisle Otter Blocks PRO
- CVE-2024-3725 Cross-site scripting in Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
- CVE-2024-3343 Cross-site scripting in Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
- CVE-2024-3344 Cross-site scripting in Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
- CVE-2024-2226 Cross-site scripting in Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
- CVE-2024-2841 Cross-site scripting in Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
Sources
Also known as GHSA-49mm-8468-22hq.