CVE-2024-34368: 
WordPress vulnerability analysis and mitigation

The Mooberry Book Manager WordPress plugin contains a Sensitive Information Exposure vulnerability (CVE-2024-34368) affecting versions up to and including 4.15.12. The vulnerability was discovered by Steven Julian and publicly disclosed on May 3, 2024. This security issue allows unauthenticated attackers to access potentially sensitive information through exported files (WPScan, Patchstack).

The vulnerability is classified as CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) with a CVSS v3.1 score of 5.3 (Medium), using the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. This indicates that the vulnerability can be exploited remotely with low attack complexity, requires no privileges or user interaction, and primarily impacts confidentiality (Patchstack).

The vulnerability allows unauthenticated attackers to extract potentially sensitive information from exported files, which could expose data that should not be accessible to regular users. This exposure could potentially be leveraged to exploit other weaknesses in the system (Patchstack).

The vulnerability is considered to have low attack complexity and requires no special privileges or user interaction to exploit. It can be accessed remotely by unauthenticated users, though it has been assessed as having a low severity impact and is unlikely to be exploited (Patchstack).

The vulnerability has been fixed in version 4.15.13 of the Mooberry Book Manager plugin. Users are advised to update to this version or later to remediate the security issue. Website administrators can also enable auto-updates for vulnerable plugins if they are Patchstack users (WPScan).