Unauthorized Access to Sensitive Information in Contest Gallery

CVE-2024-43283

What is CVE-2024-43283?

The Contest Gallery plugin for WordPress is susceptible to a vulnerability that allows unauthorized actors to access sensitive information, specifically the user IDs and IP addresses of commenters. This exploit affects all versions from n/a up to 23.1.2, enabling attackers to expose personal data, which could lead to further security breaches. It is crucial for users to update their plugins to the latest version to mitigate potential risks.

References