CVE-2024-0708: 
WordPress vulnerability analysis and mitigation

The Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages plugin for WordPress contains a Sensitive Information Exposure vulnerability (CVE-2024-0708) affecting all versions up to and including 1.7.2. The vulnerability was disclosed on February 15, 2024, and impacts the WordPress plugin's landing page functionality (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 5.3 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. This indicates that the vulnerability can be exploited over the network, requires low attack complexity, needs no privileges or user interaction, and can result in low-level information disclosure (Wordfence).

The vulnerability allows unauthenticated attackers to access landing pages that may not be intended for public viewing. This could potentially expose sensitive or pre-release content that was meant to be private (NVD).

A patch has been released to address this vulnerability. Users are advised to update to version 1.7.3 or later of the Landing Page Cat plugin. The fix can be found in the WordPress plugin repository (WordPress Plugin).