Vulnerabilities > CVE-2024-10285 - Unspecified vulnerability in Ce21 Suite

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
ce21
NVD
Published: 2024-11-09
Updated: 2025-01-29

Summary

The CE21 Suite plugin for WordPress is vulnerable to sensitive information disclosure via the plugin-log.txt in versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to log in the user associated with the JWT token.

Vulnerable Configurations

Part Description Count
Application
Ce21
11

References