CVE-2024-13773

HIGH 7.5CVE-2024-13773 · Published 14/03/2025 · updated 17/06/2026

In short

CVE-2024-13773 is a HIGH (CVSS 7.5) vulnerability affecting civi (uxper).
Chance of exploitation in the next 30 days (EPSS): 0.27%, higher than 19.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
civi uxper	`≤ 2.1.4`	No fix yet

Description

The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via hard-coded credentials. This makes it possible for unauthenticated attackers to extract sensitive data including LinkedIn client and secret keys.

References

localhost/wp-content/themes/civi/includes/class-init.php · Broken Link
wordfence.com/threat-intel/vulnerabilities/id/e3499182-7501-4fec-a7c6-b66ae47533cd · Third Party Advisory

More vulnerabilities in civi

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free