Leopard - WordPress offload media <= 2.0.36 is vulnerable to Subscriber+ Sensitive Data Exposure vulnerability

Subscriber

Published
2024-08-11

The Leopard - WordPress Offload Media plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.36. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive user or configuration data.

CVE

https://www.cve.org/CVERecord?id=CVE-2024-43257

CVSS

Score:6.5

Severity:Medium

Version: 2.0.36

There is a patch available in v3.1.2 and we strongly recommend you update to this version as soon as possible.