VK All in One Expansion Unit, CVE-2024-2093

CVE, Research URL: CVE-2024-2093
Home page URL: Security reports for VK All in One Expansion Unit
Application: VK All in One Expansion Unit
Published on: Apr 10, 2024
Research Description: The VK All in One Expansion Unit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 9.95.0.1 via social meta tags. This makes it possible for unauthenticated attackers to view limited password protected content.
Affected versions: max 9.96.0.0.
Status: vulnerable