CVE-2024-3312: CWE-862 Missing Authorization in todiadiatmo Easy Custom Auto Excerpt
The Easy Custom Auto Excerpt plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4.12. This makes it possible for unauthenticated attackers to obtain excerpts of password-protected posts.
AI Analysis
Technical Summary
CVE-2024-3312 describes a missing authorization vulnerability (CWE-862) in the Easy Custom Auto Excerpt plugin for WordPress, versions up to and including 2.4.12. This flaw permits unauthenticated users to retrieve excerpts from posts that are password-protected, thereby exposing sensitive information. The vulnerability has a CVSS 3.1 base score of 5.3, reflecting a medium severity impact primarily on confidentiality. No patch or remediation details are currently available from the vendor or advisory sources.
Potential Impact
The vulnerability allows unauthorized disclosure of excerpts from password-protected posts, potentially leaking sensitive content that site owners intended to restrict. There is no indication of impact on integrity or availability. No known active exploitation has been reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider disabling the Easy Custom Auto Excerpt plugin or restricting access to affected content through alternative means to prevent unauthorized excerpt exposure.
CVE-2024-3312: CWE-862 Missing Authorization in todiadiatmo Easy Custom Auto Excerpt
Description
The Easy Custom Auto Excerpt plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4.12. This makes it possible for unauthenticated attackers to obtain excerpts of password-protected posts.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2024-3312 describes a missing authorization vulnerability (CWE-862) in the Easy Custom Auto Excerpt plugin for WordPress, versions up to and including 2.4.12. This flaw permits unauthenticated users to retrieve excerpts from posts that are password-protected, thereby exposing sensitive information. The vulnerability has a CVSS 3.1 base score of 5.3, reflecting a medium severity impact primarily on confidentiality. No patch or remediation details are currently available from the vendor or advisory sources.
Potential Impact
The vulnerability allows unauthorized disclosure of excerpts from password-protected posts, potentially leaking sensitive content that site owners intended to restrict. There is no indication of impact on integrity or availability. No known active exploitation has been reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider disabling the Easy Custom Auto Excerpt plugin or restricting access to affected content through alternative means to prevent unauthorized excerpt exposure.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- Wordfence
- Date Reserved
- 2024-04-04T15:57:44.990Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 699f6c91b7ef31ef0b566552
Added to database: 2/25/2026, 9:41:37 PM
Last enriched: 4/9/2026, 2:16:06 PM
Last updated: 4/12/2026, 3:42:41 PM
Views: 21
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.