Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.3
CVE-2024-12159: WordPress plugin exposes sensitive data for Google Ads
CVE-2024-12159 · published 1 year ago
Summary
The Optimize Your Campaigns plugin for WordPress shares sensitive configuration data with anyone who knows the URL. This could allow hackers to steal information that could be used in future attacks. Update the plugin to the latest version (3.2 or later) to fix this issue.
Original advisory text
The Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.1 due to the print_php...
The Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.1 due to the print_php_information.php being publicly accessible. This makes it possible for unauthenticated attackers to extract sensitive configuration data that can be leveraged in another attack.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Type
CWE-200Information Exposure
Timeline
Published7 Jan 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-12159 · NVD
Track software like this
Free during beta