Sensitive Information Exposure in Tripetto Plugin for WordPress

CVE-2024-13829

What is CVE-2024-13829?

The Tripetto plugin for WordPress, designed for creating contact forms, surveys, and quizzes, is affected by a vulnerability that allows unauthenticated attackers to access sensitive information. This issue arises from improper handling of uploaded attachments through the 'attachments.php' file, potentially exposing files submitted via forms to unauthorized users. All versions up to and including 8.0.8 are susceptible, highlighting the need for immediate attention to secure sensitive user data from exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References