Medium severity4.9NVD Advisory· Published Jul 1, 2024· Updated Apr 15, 2026

CVE-2024-3122

Description

CHANGING Mobile One Time Password does not properly filter parameters for the file download functionality, allowing remote attackers with administrator privilege to read arbitrary file on the system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Mobile One Time Passwordllm-fuzzy
Package: https://wordpress.org/plugins/mobile-one-time-password

Patches

Vulnerability mechanics

References

www.twcert.org.tw/en/cp-139-7912-4c800-2.htmlnvd
www.twcert.org.tw/tw/cp-132-7911-0962e-1.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.319
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000