CVE-2024-38742 — WordPress MBE eShip plugin <= 2.1.2 - Sensitive Data Exposure vulnerability

CVE-2024-38742

WordPress MBE eShip plugin <= 2.1.2 - Sensitive Data Exposure vulnerability PUBLISHED

Description (CNA)

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in MBE Worldwide S.P.A. MBE eShip allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MBE eShip: from n/a through 2.1.2.

Affected (CNA)

Vendor / product	Versions
MBE Worldwide S.p.A. / MBE eShip	affected n/a through 2.1.2

CWE

CWE-200

References

https://patchstack.com/database/vulnerability/mail-boxes-etc/wordpress-mbe-eship-plugin-2-1-2-sensitive-data-exposure-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.