CVE-2024-2950

The BoldGrid Easy SEO – Simple and Effective SEO plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.6.14 via meta information (og:description) This makes it possible for unauthenticated attackers to view the first 130 characters of a password protected post which can contain sensitive information.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:boldgrid:easy_seo:*:*:*:*:*:wordpress:*:*

History

27 Feb 2025, 14:53

Type Values Removed Values Added
References () https://plugins.trac.wordpress.org/browser/boldgrid-easy-seo/tags/1.6.15/includes/class-boldgrid-seo-admin.php?rev=3064911 - () https://plugins.trac.wordpress.org/browser/boldgrid-easy-seo/tags/1.6.15/includes/class-boldgrid-seo-admin.php?rev=3064911 - Product
References () https://www.wordfence.com/threat-intel/vulnerabilities/id/d502e617-a59f-4385-b050-3702a1b1ed7e?source=cve - () https://www.wordfence.com/threat-intel/vulnerabilities/id/d502e617-a59f-4385-b050-3702a1b1ed7e?source=cve - Third Party Advisory
First Time Boldgrid
Boldgrid easy Seo
CWE NVD-CWE-noinfo
CPE cpe:2.3:a:boldgrid:easy_seo:*:*:*:*:*:wordpress:*:*

06 Apr 2024, 04:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-06 04:15

Updated : 2025-02-27 14:53


NVD link : CVE-2024-2950

Mitre link : CVE-2024-2950


JSON object : View

Products Affected

boldgrid

  • easy_seo