Sensitive Information Exposure in Tripetto Plugin for WordPress

CVE-2024-13829

Summary

The Tripetto plugin for WordPress, designed for creating contact forms, surveys, and quizzes, is affected by a vulnerability that allows unauthenticated attackers to access sensitive information. This issue arises from improper handling of uploaded attachments through the 'attachments.php' file, potentially exposing files submitted via forms to unauthorized users. All versions up to and including 8.0.8 are susceptible, highlighting the need for immediate attention to secure sensitive user data from exploitation.

References