Vulnerabilities > CVE-2024-8483 - Unspecified vulnerability in Madrasthemes MAS Static Content

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

madrasthemes

NVD

Published: 2024-09-25

Updated: 2024-10-02

Summary

The MAS Static Content plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.8 via the static_content() function. This makes it possible for authenticated attackers, with contributor-level access and above, to extract potentially sensitive information from private static content pages.

Vulnerable Configurations

Part	Description	Count
Application	Madrasthemes Madrasthemes MAS Static Content - Madrasthemes MAS Static Content 1.0.0 Madrasthemes MAS Static Content 1.0.1 Madrasthemes MAS Static Content 1.0.2 Madrasthemes MAS Static Content 1.0.3 Madrasthemes MAS Static Content 1.0.4 Madrasthemes MAS Static Content 1.0.5 Madrasthemes MAS Static Content 1.0.6 Madrasthemes MAS Static Content 1.0.7 Madrasthemes MAS Static Content 1.0.8	10

Summary

Vulnerable Configurations

References