Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-5615

Open Graph <= 1.11.2 - Unauthenticated Sensitive Information Exposure

Description

The Open Graph plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.11.2 via the 'opengraph_default_description' function. This makes it possible for unauthenticated attackers to extract sensitive data including partial content of password-protected blog posts.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

willnorris Open Graph

Default version status: unaffected

  • 0 to ≤ 1.11.2affected

References