Sensitive Information Exposure in Wise Chat Plugin for WordPress
CVE-2024-13613
7.5HIGH
What is CVE-2024-13613?
The Wise Chat plugin for WordPress has a vulnerability that allows unauthenticated attackers to access sensitive data located in the /wp-content/uploads directory. This directory may contain file attachments included in chat messages, potentially exposing confidential information stored insecurely. Although a partial patch was implemented in version 3.3.3, earlier versions remain susceptible to this security risk, highlighting the importance of updating to the latest version to safeguard against potential data leaks.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Wise Chat * <= 3.3.2
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Tim Coen