High · 8.8 CVE-2024-25917 EUVD-2024-23219GHSA-2rwq-335q-72xp

WordPress WP Setup Wizard plugin <= 1.0.8.1 - Auth. Full Database Download Vulnerability

Published Apr 25, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: CodeRevolution Product: WP Setup Wizard

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in CodeRevolution WP Setup Wizard.This issue affects WP Setup Wizard: from n/a through 1.0.8.1.

Affected products

Vendor	Product	Affected	Fixed
CodeRevolution	WP Setup Wizard	≤ 1.0.8.1	—

References

https://patchstack.com/database/vulnerability/wp-setup-wizard/wordpress-wp-setup-wizard-plugin-1-0-8-1-subscriber-full-database-download-vulnerability?_s_id=cve vdb-entry