WordPress ManageWP Worker - Full Path Disclosure Detection

WordPress ManageWP Worker plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress ManageWP Worker plugin files are publicly accessible...

WordPress WP Mail SMTP - Full Path Disclosure Detection

WordPress WP Mail SMTP plugin is vulnerable to full path disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress WP Mail SMTP plugin is vulnerable to full path disclosure via direct access to plugin files.""" from kittysploit import from...

WordPress YITH WooCommerce Wishlist - Full Path Disclosure Detection

WordPress YITH WooCommerce Wishlist plugin is vulnerable to full path disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress YITH WooCommerce Wishlist plugin is vulnerable to full path disclosure via direct access to plugin f.""" from kittysploit impo...

WordPress Yoast SEO - Full Path Disclosure Detection

WordPress Yoast SEO plugin is vulnerable to full path disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Yoast SEO plugin is vulnerable to full path disclosure via direct access to plugin files.""" from kittysploit import from...

vBulletin - Full Path Disclosure Detection

Detects vBulletin - Full Path Disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects vBulletin - Full Path Disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'vBulletin - Full Path Disclosure...

MyBB - Full Path Disclosure Detection

Detected MyBB forum software exposed the server's full filesystem path through PHP fatal errors when files that implemented interfaces were accessed without dependencies. !/usr/bin/env python3 -- coding: utf-8 -- """Detected MyBB forum software exposed the server's full filesystem path through PH...

DedeCMS 5.7 - Path Disclosure Detection

DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/incarchivesfunctions.php !/usr/bin/env python3 -- coding: utf-8 -- """DedeCMS 5.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...

CouchCMS <= 2.0 - Path Disclosure Detection

CouchCMS = 2.0 allows remote attackers to discover the full path via a direct request to includes/mysql2i/mysql2i.func.php or addons/phpmailer/phpmailer.php. !/usr/bin/env python3 -- coding: utf-8 -- """CouchCMS = 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Cacti - Full Path Disclosure Detection

Detected a Full Path Disclosure FPD in Cacti when the log file is not writable. The error message reveals the absolute path of the log file on the server. !/usr/bin/env python3 -- coding: utf-8 -- """Detected a Full Path Disclosure FPD in Cacti when the log file is not writable.""" import re from...

WordPress Elementor Page Builder - Full Path Disclosure Detection

WordPress Plugin Elementor Page Builder plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Elementor Page Builder plugin files...

WordPress Google Analytics - Full Path Disclosure Detection

Detected WordPress Google Analytics Dashboard Plugin for WordPress by MonsterInsights, potentially revealing analytics data, file paths, and errors. !/usr/bin/env python3 -- coding: utf-8 -- """Detected WordPress Google Analytics Dashboard Plugin for WordPress by MonsterInsights, potentially...

WordPress Events Manager - Full Path Disclosure Detection

WordPress WP Super Cache plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress WP Super Cache plugin files are publicly accessible withou...

WordPress WP Migrate DB - Full Path Disclosure Detection

The WP Migrate DB WP Migrate Lite - WordPress Migration Made Easy plugin for WordPress was detected to be vulnerable to Full Path Disclosure, allowing unauthenticated attackers to obtain the full application path that could aid other attacks when combined with another vulnerability. !/usr/bin/env...

WordPress Data Source for Contact Form 7 - Full Path Disclosure Detection

WordPress Plugin CData Source for Contact Form 7 files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin CData Source for Contact Form 7...

WordPress Storefront Theme - Full Path Disclosure Detection

The Storefront theme for WordPress was detected to be vulnerable to Full Path Disclosure, allowing unauthenticated attackers to obtain the full application path that could aid other attacks when combined with another vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The Storefront theme...

WordPress Widget Logic - Full Path Disclosure Detection

WordPress Widget Logic plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Widget Logic plugin files are publicly accessible without...

WordPress WPFront Scroll Top - Full Path Disclosure Detection

WordPress Plugin WPFront Scroll Top plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin WPFront Scroll Top plugin files are...

WordPress WP Fastest Cache Plugin - Full Path Disclosure Detection

WordPress plugin WP Fastest Cache internal file system path was disclosed through direct access to unprotected PHP files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress plugin WP Fastest Cache internal file system path was disclosed through direct access to unprotected.""" from kittysploi...

User Role Editor - Full Path Disclosure Detection

User Role Editor WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """User Role Editor WordPres...

WordPress Plugin Really Simple CAPTCHA - Full Path Disclosure Detection

WordPress Plugin Really Simple CAPTCHA was detected to be vulnerable to Full Path Disclosure, allowing unauthenticated attackers to obtain the full application path that could aid other attacks when combined with another vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin...