Sensitive Information Exposure Vulnerability in Button Block Plugin for WordPress

CVE-2024-12560

What is CVE-2024-12560?

CVE-2024-12560 represents a significant security vulnerability in the Button Block – a popular customizable button plugin for WordPress. This vulnerability allows authenticated attackers, specifically those with Contributor-level access and higher, to exploit the 'btn_block_duplicate_post' function. It enables them to extract potentially sensitive data from draft, scheduled, private, and password-protected posts. As such, it poses a serious risk for website security and data integrity, emphasizing the need for immediate updates to safeguard against unauthorized data retrieval.

References