CVE-2024-30511 MEDIUM

CVE-2024-30511: WordPress FG PrestaShop to WooCommerce plugin <= 4.45.1 - Sensitive Data Exposure via Log File vulnerability

Vendor Frédéric Gilles
Product FG PrestaShop to WooCommerce
Weakness CWE-532 · Sensitive info in logs
Published March 29, 2024
Last update April 28, 2026
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Insertion of Sensitive Information into Log File vulnerability in Frédéric GILLES FG PrestaShop to WooCommerce.This issue affects FG PrestaShop to WooCommerce: from n/a through 4.45.1.

Explanation of Vulnerability in Simple Terms

02Summary

FG PrestaShop to WooCommerce versions up to 4.45.1 expose sensitive information through improper logging or data exposure. An attacker on the network can read this information without authentication. The vulnerability affects data confidentiality but not integrity or availability. Update to a version newer than 4.45.1 to remediate.

What an attacker can do

03Attacker Capabilities

Read sensitive information exposed by the application without authentication.

Potential impact on your site

04Site Impact

Sensitive data may be exposed to unauthenticated attackers, potentially including logs or configuration details.

Conditions required to exploit

05Prerequisites

Network access to the affected site; no authentication or user interaction required.

Key dates

06Disclosure timeline

March 29, 2024 CVE published
April 28, 2026 Record updated

Related vulnerabilities

08Related CVE

CVE-2024-31254 WordPress WordPress Backup & Migration plugin <= 1.4.7 - Sensitive Data Exposure via Log File vulnerability CVE-2024-2302 Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.2.9 - Sensitive Information Exposure CVE-2025-31788 WordPress AIO Performance Profiler, Monitor, Optimize, Compress & Debug plugin <= 1.3 - Sensitive Data Exposure vulnerability CVE-2024-37205 WordPress affiliate-toolkit plugin <= 3.4.4 - Sensitive Data Exposure via Log File vulnerability CVE-2022-44587 WordPress WP 2FA plugin <= 2.6.3 - Sensitive Data Exposure via Log File vulnerability