CVE-2024-1436: 
WordPress vulnerability analysis and mitigation

CVE-2024-1436 is a Sensitive Data Exposure vulnerability affecting the WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit WordPress plugin versions through 1.0.9. The vulnerability was discovered and reported by Emili Castells on February 17, 2024, and was publicly disclosed on February 26, 2024 (Patchstack Database).

The vulnerability has been assigned a CVSS v3.1 Base Score of 5.3 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. The issue is classified as CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor). The vulnerability can be exploited without authentication, potentially allowing malicious actors to access sensitive information that should not be available to regular users (Patchstack Database).

The vulnerability could allow unauthorized actors to view sensitive information that is normally not accessible to regular users. This exposed information could potentially be used to exploit other weaknesses in the system (Patchstack Database).

Currently, there is no official fix available for this vulnerability. The issue affects versions up to and including 1.0.9 of the WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit plugin (Patchstack Database).