high8.1
CVE-2024-0212
The Cloudflare Wordpress plugin was found to be vulnerable to improper authentication.
Impact
The Cloudflare Wordpress plugin was found to be vulnerable to improper authentication. The vulnerability enables attackers with a lower privileged account to access data from the Cloudflare API.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cloudflare | Cloudflare | before 4.12.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/cloudflare/Cloudflare-WordPress/releases/tag/v4.12.3
- https://github.com/cloudflare/Cloudflare-WordPress/security/advisories/GHSA-h2fj-7r3m-7gf2
- https://github.com/cloudflare/Cloudflare-WordPress/releases/tag/v4.12.3
- https://github.com/cloudflare/Cloudflare-WordPress/security/advisories/GHSA-h2fj-7r3m-7gf2