6 matches found
CVE-2024-7415 Remember Me Controls <= 2.0.1 - Unauthenticated Full Path Disclosure
The Remember Me Controls plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0.1. This is due to the plugin allowing direct access to the bootstrap.php file which has displayerrors on. This makes it possible for unauthenticated attackers to retrieve...
WordPress Remember Me Controls plugin <= 2.0.1 - Unauthenticated Full Path Disclosure vulnerability
Unauthenticated Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin Remember Me Controls versions = 2.0.1...
WordPress Remember Me Controls Plugin <= 2.0.1 is vulnerable to Sensitive Data Exposure
Software Remember Me Controls Type Plugin Vulnerable versions = 2.0.1 Fixed in 2.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-7415 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID aaea3456c788 Credits stealthcopter Required...
CVE-2024-7415: Exposure of Sensitive Information to an Unauthorized Actor
The Remember Me Controls plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0.1. This is due to the plugin allowing direct access to the bootstrap.php file which has displayerrors on. This makes it possible for unauthenticated attackers to retrieve...
WordPress plugin Remember Me Controls 信息泄露漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...
PT-2024-38331
Name of the Vulnerable Software and Affected Versions Remember Me Controls plugin for WordPress versions up to, and including, 2.0.1 Description The issue is related to Full Path Disclosure, which occurs because the plugin allows direct access to the bootstrap.php file with display errors enabled...