CVE-2024-0909mediumCWE-200

CVE-2024-0909: medium-severity vulnerability in cayenne Anonymous Restricted Content

Anonymous Restricted Content <= 1.6.2 - Protection Mechanism Bypass

Published · Updated

Follow this CVE+ Monitor Anonymous Restricted Content

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.6%
The Anonymous Restricted Content plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 1.6.2. This is due to insufficient restrictions through the REST API on the posts/pages that protections are being place on. This makes it possible for unauthenticated attackers to access protected content.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
cayenne · Anonymous Restricted Content
Related CVEs — cayenne Anonymous Restricted Content

In the same product, most dangerous first.

CVE-2024-11089MEDIUMAnonymous Restricted Content <= 1.6.5 - Unauthenticated Content Restriction Bypass to Sensitive Information ExposureEPSS 0.6%