WordPress security by component
Subway – Private Site Option
Plugin description
Subway – Private Site Option provides a private-site option that restricts public access to WordPress content.
Subway – Private Site Option (subway) is a WordPress plugin with 1 published CVE record in this archive. The latest tracked vulnerability was published May 02, 2024; the highest published CVSS base score is 5.3.
Plugin slug:
subwayLatest vulnerability
CVE-2024-1678: Subway – Private Site Option: Sensitive information exposure
Subway – Private Site Option is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.
| Safe version |
|
||
|---|---|---|---|
| May 02, 2024 |
CVE-2024-1678
Subway – Private Site Option: Sensitive information exposure
Subway – Private Site Option is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.
|
See mitigation notes |
CVE5.3
|