CVE-2024-30511: 
WordPress vulnerability analysis and mitigation

The FG PrestaShop to WooCommerce WordPress plugin contains a Sensitive Information Exposure vulnerability (CVE-2024-30511) affecting versions up to and including 4.45.1. The vulnerability allows unauthenticated attackers to view sensitive data stored in log files (WPScan, Patchstack).

The vulnerability is classified as CWE-532 (Insertion of Sensitive Information into Log File) with a CVSS v3.1 score of 5.3 (Medium), using the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. This indicates that the vulnerability can be exploited remotely with low attack complexity, requires no privileges or user interaction, and primarily impacts confidentiality (NVD).

The vulnerability allows unauthorized access to sensitive information stored in log files, which could potentially expose confidential data that should not be accessible to regular users. This exposure could be leveraged by attackers to gather information for further system exploitation (Patchstack).

The vulnerability can be exploited by unauthenticated attackers, requiring no special privileges or user interaction. The low attack complexity suggests that exploitation is straightforward (WPScan).

The vulnerability has been fixed in version 4.47.0 of the FG PrestaShop to WooCommerce plugin. Users are advised to update to this version or later to remediate the security issue (Patchstack).