CVE-2024-7415

🗓️ 06 Sep 2024 03:30:39Reported by WordfenceType

The WordPress plugin Remember Me Controls is vulnerable to Full Path Disclosure, allowing unauthenticated attackers to retrieve the full path of the web application

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-7415	6 Sep 202407:24	–	circl
CNNVD	WordPress plugin Remember Me Controls 信息泄露漏洞	6 Sep 202400:00	–	cnnvd
Cvelist	CVE-2024-7415 Remember Me Controls <= 2.0.1 - Unauthenticated Full Path Disclosure	6 Sep 202403:30	–	cvelist
EUVD	EUVD-2024-48341	3 Oct 202520:07	–	euvd
NVD	CVE-2024-7415	6 Sep 202404:15	–	nvd
Patchstack	WordPress Remember Me Controls Plugin <= 2.0.1 is vulnerable to Sensitive Data Exposure	6 Sep 202400:00	–	patchstack
Patchstack	WordPress Remember Me Controls plugin <= 2.0.1 - Unauthenticated Full Path Disclosure vulnerability	6 Sep 202402:46	–	patchstack
RedhatCVE	CVE-2024-7415	23 May 202508:57	–	redhatcve
Vulnrichment	CVE-2024-7415 Remember Me Controls <= 2.0.1 - Unauthenticated Full Path Disclosure	6 Sep 202403:30	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (September 2, 2024 to September 8, 2024)	12 Sep 202414:57	–	wordfence

NVD

Vulners

Vulnrichment

Node

coffee2code remember_me_controlsRange<2.1wordpress

[
  {
    "vendor": "coffee2code",
    "product": "Remember Me Controls",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.0.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset
plugins	www.plugins.trac.wordpress.org/browser/remember-me-controls/tags/2.0.1/tests/phpunit/bootstrap.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/01707346-86c2-45c8-a2c9-81a147506fa4

08 Apr 2026 16:32Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.15.3

EPSS0.00615

SSVC