WordPress WP Super Cache - Full Path Disclosure Detection

WordPress WP Super Cache plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress WP Super Cache plugin files are publicly accessible withou...

WordPress SVG Support - Full Path Disclosure Detection

The WordPress SVG Support plugin was detected to have publicly accessible PHP files without ABSPATH protection, which exposed sensitive server path information. Direct access to vendor/composer files triggered PHP fatal errors that revealed the full WordPress filesystem path. !/usr/bin/env python...

WordPress Twenty Fifteen Theme - Full Path Disclosure Detection

WordPress theme twentyfifteen internal file system path of a WordPress installation is exposed or disclosed to unauthorized users. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress theme twentyfifteen internal file system path of a WordPress installation is exposed or disclosed to.""" from...

WordPress Twenty Twenty Theme - Full Path Disclosure Detection

WordPress theme twentytwenty internal file system path of a WordPress installation is exposed or disclosed to unauthorized users. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress theme twentytwenty internal file system path of a WordPress installation is exposed or disclosed to .""" from...

WordPress Twenty Seventeen - Full Path Disclosure Detection

WordPress Twenty Seventeen theme files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Twenty Seventeen theme files are publicly accessible...

Wordfence - Full Path Disclosure Detection

Wordfence WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Wordfence WordPress plugin...

vBulletin - Full Path Disclosure Detection

Detects vBulletin - Full Path Disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects vBulletin - Full Path Disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'vBulletin - Full Path Disclosure...

WordPress Elementor Page Builder - Full Path Disclosure Detection

WordPress Plugin Elementor Page Builder plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Elementor Page Builder plugin files...

WordPress Plugin Imsanity - Full Path Disclosure Detection

WordPress Imsanity plugin is vulnerable to full path disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Imsanity plugin is vulnerable to full path disclosure via direct access to plugin files.""" from kittysploit import from...

WordPress Menu Image - Full Path Disclosure Detection

WordPress Plugin Menu Image plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Menu Image plugin files are publicly accessible...

WordPress Meta Box - Full Path Disclosure Detection

The Meta Box – WordPress Custom Fields Framework plugin for WordPress was detected to be vulnerable to Full Path Disclosure, allowing unauthenticated attackers to obtain the full application path. !/usr/bin/env python3 -- coding: utf-8 -- """The Meta Box – WordPress Custom Fields Framework plugin...

WordPress Simple Social Icons - Full Path Disclosure Detection

WordPress Plugin Simple Social Icons files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Simple Social Icons files are publicly...

WordPress Storefront Theme - Full Path Disclosure Detection

The Storefront theme for WordPress was detected to be vulnerable to Full Path Disclosure, allowing unauthenticated attackers to obtain the full application path that could aid other attacks when combined with another vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The Storefront theme...

WordPress Call Now Button - Full Path Disclosure Detection

WordPress Plugin Call Now Button files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Call Now Button files are publicly accessible...

WordPress Custom Post Type UI - Full Path Disclosure Detection

Detected WordPress Custom Post Type UI exposes internal file system path through direct file access. !/usr/bin/env python3 -- coding: utf-8 -- """Detected WordPress Custom Post Type UI exposes internal file system path through direct file access.""" from kittysploit import from...

WordPress Plugin reCaptcha by BestWebSoft (google-captcha) - Full Path Disclosure Detection

WordPress ManageWP Worker plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress ManageWP Worker plugin files are publicly accessible...

WordPress Google Analytics - Full Path Disclosure Detection

Detected WordPress Google Analytics Dashboard Plugin for WordPress by MonsterInsights, potentially revealing analytics data, file paths, and errors. !/usr/bin/env python3 -- coding: utf-8 -- """Detected WordPress Google Analytics Dashboard Plugin for WordPress by MonsterInsights, potentially...

WordPress Plugin Site Kit by Google - Full Path Disclosure Detection

WordPress plugin Site Kit by Google internal file system path is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress plugin Site Kit by Google internal file system path is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

WordPress Header Footer Elementor - Full Path Disclosure Detection

WordPress Header Footer Elementor plugin also known as Ultimate Addons for Elementor - Lite contains PHP files that lack proper ABSPATH protection, allowing direct access that reveals sensitive server path information via PHP error messages. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress...

JetPack - Full Path Disclosure Detection

JetPack WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """JetPack WordPress plugin contains ...