← WordPress Vulnerabilities
WordPress security by component

My Private Site

My Private Site is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Feb 29, 2024; the highest CVE/CNA score is 5.3.

Plugin slug: my-private-site

CVE-2024-0978: My Private Site: Sensitive information exposure

My Private Site is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.

PublishedFeb 29, 2024
Safe version guidanceSee mitigation notes
Safe version
Feb 29, 2024 CVE-2024-0978
My Private Site: Sensitive information exposure
My Private Site is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.
See mitigation notes
CVE5.3
NVDPending
Jun 27, 2022 CVE-2022-1627
My Private Site: Cross-site request forgery
My Private Site is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE4.3
NVD4.3