Medium · 5.3 CVE-2024-24845 EUVD-2024-22208GHSA-2pxm-h99r-p9r4

WordPress Post Thumbnail Editor plugin <= 2.4.8 - Unauthenticated Sensitive Data Exposure vulnerability

Published Mar 16, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Sewpafly Product: Post Thumbnail Editor

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Sewpafly Post Thumbnail Editor.This issue affects Post Thumbnail Editor: from n/a through 2.4.8.

Affected products

Vendor	Product	Affected	Fixed
Sewpafly	Post Thumbnail Editor	≤ 2.4.8	—

References

https://patchstack.com/database/vulnerability/post-thumbnail-editor/wordpress-post-thumbnail-editor-plugin-2-4-8-unauthenticated-sensitive-data-exposure-vulnerability?_s_id=cve vdb-entry