CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. It affects WordPress. Exploitation may require the attacker to be authenticated.
CVE
CVE-2021-24824
Severity
MEDIUM
CVSS
4.3
EPSS
0.79%
WordPress
Original NVD Description
The [field] shortcode included with the Custom Content Shortcode WordPress plugin before 4.0.1, allows authenticated users with a role as low as contributor, to access arbitrary post metadata. This could lead to sensitive data disclosure, for example when used in combination with WooCommerce, the email address of orders can be retrieved
Related CVEs
Other vulnerabilities affecting the same vendor(s)