Information Exposure Vulnerability in Optimize Your Campaigns Plugin for WordPress
CVE-2024-12159

5.3MEDIUM

Key Information:

Vendor

Wordpress
Status
Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords
Vendor
CVE Published:
7 January 2025

What is CVE-2024-12159?

The Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords plugin for WordPress contains a significant vulnerability that allows unauthorized access to sensitive configuration data. The issue arises from the accessibility of the print_php_information.php file in all versions up to 3.1, enabling unauthenticated attackers to retrieve critical information that could facilitate further attacks. It is imperative for users of this plugin to assess their installations and apply necessary updates to mitigate the risks associated with this vulnerability.

Affected Version(s)

Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords * <= 3.1

References

https://www.wordfence.com/threat-intel/vulnerabilities/id...
https://plugins.trac.wordpress.org/browser/muzaara-adword...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Joshua Chan
.