nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-24867 CVE-2024-24867
MEDIUM
WordPress WP Stats Manager plugin <= 6.9.4 - Sensitive Data Exposure vulnerability
Record summary
CVE-2024-24867 has a selected CVSS score of 5.3 (medium).
Description
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Osamaesh WP Visitor Statistics (Real Time Traffic).This issue affects WP Visitor Statistics (Real Time Traffic): from n/a through 6.9.4.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 20, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
WP Visitor Statistics (Real Time Traffic)Browse Osamaesh / WP Visitor Statistics (Real Time Traffic)wp-stats-managerDefault status: unaffected | CVE List | Through 6.9.4 | affected |
References
2patchstack.comvdb entry
https://patchstack.com/database/vulnerability/wp-stats-manager/wordpress-wp-stats-manager-plugin-6-9-4-sensitive-data-exposure-vulnerability?_s_id=cve