CVE-2024-0212

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-0212
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-0212.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-0212
Aliases
  • GHSA-h2fj-7r3m-7gf2
Published
2024-01-29T09:13:44Z
Modified
2026-10-28T02:30:32Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
Cloudflare WordPress plugin enables information disclosure of Cloudflare API (for low privileged users)
Details

The Cloudflare Wordpress plugin was found to be vulnerable to improper authentication. The vulnerability enables attackers with a lower privileged account to access data from the Cloudflare API.

Database specific 
{
    "cna_assigner": "cloudflare",
    "cwe_ids": [
        "CWE-284"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/0xxx/CVE-2024-0212.json"
}
References

Affected packages

Git / github.com/cloudflare/cloudflare-wordpress

Affected ranges

Type
GIT
Repo
https://github.com/cloudflare/cloudflare-wordpress
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
c1c08af5e63c2d177680840aef53762a53b53010
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "4.12.3"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "ChangesAt"
        },
        {
            "original_tag": "v4.12.3",
            "range": [
                {
                    "fixed": "c1c08af5e63c2d177680840aef53762a53b53010"
                }
            ],
            "source": "REFERENCES_TAG"
        },
        {
            "cpe": "cpe:2.3:a:cloudflare:cloudflare:*:*:*:*:*:wordpress:*:*",
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "4.12.3"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Affected versions

v1.*
v1.0.0-beta
v1.0.1-beta
v1.0.2-beta
v1.0.3-beta
v2.*
v2.0.4-beta
v2.1.0-beta
v2.2.0-beta
v3.*
v3.0.0
v3.0.1
v3.0.2
v3.0.4
v3.0.5
v3.0.6
v3.1.0
v3.1.1
v3.2.0
v3.2.1
v3.3.0
v3.3.1
v3.3.2
v3.4.0
v3.4.1
v3.5.0
v3.5.1
v3.8.0
v3.8.10
v3.8.2
v3.8.3
v3.8.4
v3.8.5
v3.8.6
v3.8.7
v3.8.8
v3.8.9
v4.*
v4.0.0
v4.1.0
v4.10.0
v4.10.1
v4.11.0
v4.12.0
v4.12.1
v4.12.2
v4.2.0
v4.2.1
v4.2.2
v4.3.0
v4.4.0
v4.5.0
v4.5.1
v4.6.0
v4.7.0
v4.8.0
v4.8.1
v4.8.2
v4.8.3
v4.9.0
v4.9.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-0212.json"