{"id":"CVE-2024-49235","aliases":["EUVD-2024-43304","GHSA-6j47-rxg5-g629"],"status":"published","title":"WordPress Contact Forms, Live Support, CRM, Video Messages plugin \u003c= 1.10.2 - Sensitive Data Exposure vulnerability","description":"Insertion of Sensitive Information Into Sent Data vulnerability in videowhisper Contact Forms, Live Support, CRM, Video Messages live-support-tickets allows Retrieve Embedded Sensitive Data.This issue affects Contact Forms, Live Support, CRM, Video Messages: from n/a through \u003c= 1.10.2.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00446,"percentile":0.39114,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-201"],"published":"2024-10-17T17:24:17Z","modified":"2026-06-17T07:59:33Z","products":[{"vendor":"videowhisper","product":"contact forms, live support, crm, video messages"},{"vendor":"videowhisper","product":"contact_forms_live_support_crm_video_messages_plugin"},{"vendor":"videowhisper.com","product":"contact forms, live support, crm, video messages"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/live-support-tickets/vulnerability/wordpress-contact-forms-live-support-crm-video-messages-plugin-1-10-2-sensitive-data-exposure-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-49235"},{"url":"https://patchstack.com/database/vulnerability/live-support-tickets/wordpress-contact-forms-live-support-crm-video-messages-plugin-1-10-2-sensitive-data-exposure-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-6j47-rxg5-g629"}],"sources":{"cve":[{"id":"CVE-2024-49235","title":"WordPress Contact Forms, Live Support, CRM, Video Messages plugin \u003c= 1.10.2 - Sensitive Data Exposure vulnerability","description":"Insertion of Sensitive Information Into Sent Data vulnerability in videowhisper Contact Forms, Live Support, CRM, Video Messages live-support-tickets allows Retrieve Embedded Sensitive Data.This issue affects Contact Forms, Live Support, CRM, Video Messages: from n/a through \u003c= 1.10.2.","status":"published","published":"2024-10-17T17:24:17.951Z","modified":"2026-04-29T09:51:53.039Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-201"],"updated_at":"2026-11-02T14:33:55.977982Z"}],"euvd":[{"id":"EUVD-2024-43304","description":"Insertion of Sensitive Information Into Sent Data vulnerability in videowhisper Contact Forms, Live Support, CRM, Video Messages live-support-tickets allows Retrieve Embedded Sensitive Data.This issue affects Contact Forms, Live Support, CRM, Video Messages: from n/a through \u003c= 1.10.2.","status":"published","published":"2024-10-17T17:24:17Z","modified":"2026-04-29T09:51:53Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T19:05:22.319648Z"}],"ghsa":[{"id":"GHSA-6j47-rxg5-g629","title":"Insertion of Sensitive Information Into Sent Data vulnerability in VideoWhisper.Com Contact Forms...","description":"Insertion of Sensitive Information Into Sent Data vulnerability in VideoWhisper.Com Contact Forms, Live Support, CRM, Video Messages allows Retrieve Embedded Sensitive Data.This issue affects Contact Forms, Live Support, CRM, Video Messages: from n/a through 1.10.2.","status":"published","published":"2024-10-17T18:31:36Z","modified":"2026-04-01T18:33:10Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-201"],"updated_at":"2026-11-02T15:07:01.019092Z"}],"nvd":[{"id":"CVE-2024-49235","description":"Insertion of Sensitive Information Into Sent Data vulnerability in videowhisper Contact Forms, Live Support, CRM, Video Messages live-support-tickets allows Retrieve Embedded Sensitive Data.This issue affects Contact Forms, Live Support, CRM, Video Messages: from n/a through \u003c= 1.10.2.","status":"published","published":"2024-10-17T18:15:10.107Z","modified":"2026-06-17T07:59:33.41Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-201"],"updated_at":"2026-11-02T14:10:32.45889Z"}]}}