Sensitive Information Exposure in Wise Chat Plugin for WordPress

CVE-2024-13613

What is CVE-2024-13613?

The Wise Chat plugin for WordPress has a vulnerability that allows unauthenticated attackers to access sensitive data located in the /wp-content/uploads directory. This directory may contain file attachments included in chat messages, potentially exposing confidential information stored insecurely. Although a partial patch was implemented in version 3.3.3, earlier versions remain susceptible to this security risk, highlighting the importance of updating to the latest version to safeguard against potential data leaks.

References