CVE-2021-24824

CVE-2021-24824 is a medium-severity vulnerability affecting the Custom Content Shortcode WordPress plugin prior to version 4.0.1. It allows authenticated users, even those with contributor roles, to access arbitrary post metadata through the "[field]" shortcode, potentially leading to sensitive data disclosure, such as WooCommerce order email addresses. The vulnerability has a CVSS score of 4.3, indicating a low attack complexity and no user interaction required, but only impacts confidentiality. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.