CVE-2024-31249: Insertion of Sensitive Information into Log File vulnerability in WPKube Subscribe To Comments Reloaded.This i

Q: How do I fix CVE-2024-31249?

subscribe to comments reloaded: upgrade to 240119. Exact commands for each OS are on this page.

Q: Is CVE-2024-31249 being exploited?

CVE-2024-31249 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2024-31249 affect?

CVE-2024-31249 affects subscribe to comments reloaded. Severity is medium (CVSS 5.3). Insertion of Sensitive Information into Log File vulnerability in WPKube Subscribe To Comments Reloaded.This issue affects Subscribe To Comments Reloaded: from n/a through 220725.

Q: How urgent is CVE-2024-31249?

Priority 34/100. Remotely exploitable, no login, no user action

Routine

MEDIUM 5.3REMOTEUPGRADE

CVE-2024-31249 is a medium-severity flaw (CVSS 5.3) affecting subscribe to comments reloaded. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Insertion of Sensitive Information into Log File vulnerability in WPKube Subscribe To Comments Reloaded.This issue affects Subscribe To Comments Reloaded: from n/a through 220725.

Why this priority

Remotely exploitable, no login, no user action

A fixed release or distro patch exists.

Risk facts

CVSS score	5.3 (Medium)
Attack vector	Network (remote)
Attack complexity	Low
Privileges needed	None
User interaction	None
EPSS exploit chance	0.5% (top 56%)
CISA exploited list	No
Weakness	CWE-532
Published	2024-04-10
Last modified	2026-08-12

Publisher (CNA): Patchstack · Vendor: wpkube

Last updated 2026-08-12 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2024-04-10 16:15 UTCPublished CVE record published
2026-08-12 18:17 UTCUpdated Record last modified

wpkube subscribe to comments reloaded UPGRADE

Affected: < 240119

Fixed in: 240119

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy subscribe-to-comments-reloaded || rpm -q subscribe-to-comments-reloaded || subscribe-to-comments-reloaded --version

2. UPGRADE to 240119 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade subscribe-to-comments-reloaded

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade subscribe-to-comments-reloaded

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2024-31249?

subscribe to comments reloaded: upgrade to 240119. Exact commands for each OS are on this page.

Is CVE-2024-31249 being exploited?

CVE-2024-31249 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2024-31249 affect?

CVE-2024-31249 affects subscribe to comments reloaded. Severity is medium (CVSS 5.3). Insertion of Sensitive Information into Log File vulnerability in WPKube Subscribe To Comments Reloaded.This issue affects Subscribe To Comments Reloaded: from n/a through 220725.

How urgent is CVE-2024-31249?

Priority 34/100. Remotely exploitable, no login, no user action

Related CVEs

CVE-2022-29414 MEDIUM 5.4 UPGRADE Multiple (13x) Cross-Site Request Forgery (CSRF) vulnerabilities in WPKube's Subscribe To Comments Reloaded pl
CVE-2014-2274 HIGH 8.8 UPGRADE Cross-site request forgery (CSRF) vulnerability in the Subscribe To Comments Reloaded plugin before 140219 for

References

← Back to latest CVEs