CVE-2024-6569Disclosure

LOWCVSS 5.3 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

The Campaign Monitor for WordPress plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.8.15. This is due the plugin not properly restricting direct access to /forms/views/admin/create.php and display_errors being enabled. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website.

Back to dashboard

1.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-200

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Threat summary

Public PoC is present in monitored signal
1 mentions across 1 observed day

What's happening

PoC mentioned or linked in 1 signal
Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://cloud.projectdiscovery.io/library/CVE-2024-6569

Full discourse1 post

pdnuclei-bot@pdnuclei_bot138d
Disclosure
🚨 CVE-2024-6569 - medium 🚨 Campaign Monitor for WordPress - Information Disclosure > Campaign Monitor for WordPress plugin for WordPress versions up to 2.8.15 contains a ... 👾 https://cloud.projectdiscovery.io/library/CVE-2024-6569 @pdnuclei #NucleiTemplates #cve
Post summary
The tweet announces CVE-2024-6569 as an information‑disclosure flaw in Campaign Monitor for WordPress (v≤2.8.15) and links to a Nuclei library, but provides no exploitation or patch details.
0000091
960 followersView on X

Explore more

Back to dashboard