CVE-2024-37930

MEDIUM

Theme-sphere Smartmag < 9.3.0 - Information Disclosure

Title source: rule

Description

Insertion of Sensitive Information into Log File vulnerability in ThemeSphere SmartMag smartmag-responsive-retina-wordpress-magazine.This issue affects SmartMag: from n/a through < 10.1.0.

References (2)

[Vdb Entry] https://patchstack.com/database/Wordpress/Theme/smartmag-responsive-retina-wordpress-magazine/vulnerability/wordpress-smartmag-theme-9-3-0-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve

[Third Party Advisory] https://patchstack.com/database/vulnerability/smartmag-responsive-retina-wordpress-magazine/wordpress-smartmag-theme-9-3-0-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve

Scores

CVSS v3 5.3

EPSS 0.0071

EPSS Percentile 72.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-532 CWE-862

Status published

Products (2)

theme-sphere/smartmag < 9.3.0

ThemeSphere/SmartMag < 10.1.0

Published Aug 12, 2024

Tracked Since Feb 18, 2026