CVE-2024-1769

MEDIUM 5.3CVE-2024-1769 · Published 05/03/2024 · updated 17/06/2026

In short

CVE-2024-1769 is a MEDIUM (CVSS 5.3) vulnerability affecting jm twitter cards (jmlapam).
Chance of exploitation in the next 30 days (EPSS): 0.61%, higher than 49.5% of all vulnerabilities.
Fix: update to 14.1.0 or later.

Package	Affected versions	Patched versions
jm twitter cards jmlapam	`< 14.1.0`	`14.1.0`

Description

The JM Twitter Cards plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 14 via the meta description data. This makes it possible for unauthenticated attackers to view password protected post content when viewing the page source.

References

plugins.trac.wordpress.org/changeset
wordpress.org/plugins/jm-twitter-cards · Product
wordfence.com/threat-intel/vulnerabilities/id/b48e5973-6923-47cc-a660-ecc989f540f8 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free