Arbitrary File Read Vulnerability in CS Framework Plugin for WordPress

CVE-2024-12036

Summary

The CS Framework plugin for WordPress is susceptible to an Arbitrary File Read vulnerability via the get_widget_settings_json() function. This flaw allows authenticated attackers, who possess at least subscriber-level access, to access sensitive files on the server. The exploitation of this vulnerability could lead to unauthorized information disclosure, compromising the confidentiality of critical data stored on the server.

References