CVE-2024-50512mediumCWE-209

CVE-2024-50512: medium-severity vulnerability in Posti Shipping

WordPress Posti Shipping plugin <= 3.10.2 - Full Path Disclosure (FPD) vulnerability

Published · Updated

Follow this CVE+ Monitor Posti Shipping

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.3%
Generation of Error Message Containing Sensitive Information vulnerability in Posti Posti Shipping posti-shipping allows Retrieve Embedded Sensitive Data.This issue affects Posti Shipping: from n/a through <= 3.10.2.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Posti · Posti Shipping
Related CVEs — Posti Shipping

In the same product, most dangerous first.

CVE-2024-56005MEDIUMWordPress Posti Shipping Plugin <= 3.10.3 - CSRF to Settings Change vulnerabilityEPSS 0.3%