Sensitive Information Disclosure Vulnerability in CE21 Suite WordPress Plugin

CVE-2024-10285

Summary

The CE21 Suite plugin for WordPress has a vulnerability that allows unauthenticated attackers to access sensitive information through the plugin-log.txt file. Versions up to and including 2.2.0 are affected, enabling attackers to log in as the user linked to the JSON Web Token (JWT). This security flaw could potentially disclose critical user data, making it imperative for users to update to the latest version to mitigate exposure risks. Regular monitoring and patching of WordPress plugins are crucial to maintaining a secure environment.

References