Cloudflare-WordPress vulnerabilities

Latest Cloudflare-WordPress CVEs

Newest publication first

1. CVE-2024-0212 Cloudflare WordPress plugin enables information disclosure of Cloudflare API (for low privileged users)

   Published 2024-01-29

   Medium·CVSS 6.5 EPSS 0.80%

   The Cloudflare Wordpress plugin was found to be vulnerable to improper authentication. The vulnerability enables attackers with a lower privileged account to access data from the Cloudflare API.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.