Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-5615 EUVD-2024-46798GHSA-24rp-wx3g-3c5c

Open Graph <= 1.11.2 - Unauthenticated Sensitive Information Exposure

Published Jun 6, 2024 · Updated Apr 8, 2026 · Assigned by Wordfence

Description

The Open Graph plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.11.2 via the 'opengraph_default_description' function. This makes it possible for unauthenticated attackers to extract sensitive data including partial content of password-protected blog posts.

Affected products

VendorProductAffectedFixed
willnorris Open Graph ≤ 1.11.2 —

References