Medium severity5.3NVD Advisory· Published Apr 9, 2024· Updated Jun 17, 2026

CVE-2024-1984

Description

The Graphene theme for WordPress is vulnerable to unauthorized access of data via meta tag in all versions up to, and including, 2.9.2. This makes it possible for unauthenticated individuals to obtain post contents of password protected posts via the generated source.

Affected products

WordPress/Grapheneinferred2 versions
<=2.9.2+ 1 more
- (no CPE)range: <=2.9.2
- (no CPE)range: <=2.9.2
Package: https://wordpress.org/themes/graphene

Patches

Vulnerability mechanics

References

themes.trac.wordpress.org/changesetnvd
www.wordfence.com/threat-intel/vulnerabilities/id/e2f19051-fe80-469c-a514-ec3a848a4015nvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000