CVE-2024-1769

MEDIO 5.3CVE-2024-1769 · Published 05/03/2024 · updated 17/06/2026

En resumen

CVE-2024-1769 es una vulnerabilidad MEDIO (CVSS 5.3) que afecta a jm twitter cards (jmlapam).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.61%, mayor que el 49.5% de las vulnerabilidades.
Solución: actualizar a 14.1.0 o posterior.

Package	Affected versions	Patched versions
jm twitter cards jmlapam	`< 14.1.0`	`14.1.0`

Description

The JM Twitter Cards plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 14 via the meta description data. This makes it possible for unauthenticated attackers to view password protected post content when viewing the page source.

References

plugins.trac.wordpress.org/changeset
wordpress.org/plugins/jm-twitter-cards · Product
wordfence.com/threat-intel/vulnerabilities/id/b48e5973-6923-47cc-a660-ecc989f540f8 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free