CVE-2024-10285
EUVD-2024-3301309.11.2024, 03:15
The CE21 Suite plugin for WordPress is vulnerable to sensitive information disclosure via the plugin-log.txt in versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to log in the user associated with the JWT token.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ce21 | ce21_suite | 𝑥 ≤ 2.2.0 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| ce21 | ce21-suite | 𝑥 ≤ 2.2.0 | ADP |
Common Weakness Enumeration