CVE-2024-12008: Information exposure vulnerability in the W3 Total Cache WordPress plugin. This flaw allows unauthenticated attackers to potentially access sensitive information via a publicly exposed debug log file. This affects versions up to and including 2.8.1.

The exposure could include nonce values, which could be exploited in CSRF attacks. Though the debug feature must be enabled to trigger the vulnerability, the risk of unintended exposure makes this a notable security concern. With an SVRS score of 30, this vulnerability is considered a low-risk issue requiring monitoring but not immediate action. Organizations using the W3 Total Cache plugin should ensure the debug feature is disabled and regularly review their logging configurations to mitigate potential information leaks. This CVE is significant because it highlights the importance of properly securing debug logs in web applications.