Sensitive Information Exposure in Watu Quiz Plugin for WordPress

CVE-2024-0872

What is CVE-2024-0872?

The Watu Quiz plugin for WordPress has a vulnerability that allows authenticated attackers with contributor-level access or higher to exploit the watu-userinfo shortcode. This can lead to unauthorized access to sensitive user metadata, including session tokens and user emails. The vulnerability affects all versions up to and including 3.4.1, highlighting the importance of regular updates and security assessments for WordPress plugins.

References