Lucene search
+L

6 matches found

Vulnrichment
Vulnrichment
•added 2024/09/06 3:30 a.m.•16 views

CVE-2024-7415 Remember Me Controls <= 2.0.1 - Unauthenticated Full Path Disclosure

The Remember Me Controls plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0.1. This is due to the plugin allowing direct access to the bootstrap.php file which has displayerrors on. This makes it possible for unauthenticated attackers to retrieve...

5.3CVSS6.6AI score0.00439EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2024/09/06 2:46 a.m.•17 views

WordPress Remember Me Controls plugin <= 2.0.1 - Unauthenticated Full Path Disclosure vulnerability

Unauthenticated Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin Remember Me Controls versions = 2.0.1...

5.3CVSS7AI score0.00439EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/09/06 12:00 a.m.•18 views

WordPress Remember Me Controls Plugin <= 2.0.1 is vulnerable to Sensitive Data Exposure

Software Remember Me Controls Type Plugin Vulnerable versions = 2.0.1 Fixed in 2.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-7415 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID aaea3456c788 Credits stealthcopter Required...

5.3CVSS6.6AI score0.00439EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/06 12:00 a.m.•7 views

CVE-2024-7415: Exposure of Sensitive Information to an Unauthorized Actor

The Remember Me Controls plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0.1. This is due to the plugin allowing direct access to the bootstrap.php file which has displayerrors on. This makes it possible for unauthenticated attackers to retrieve...

5.3CVSS5.7AI score0.00439EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/09/06 12:00 a.m.•17 views

WordPress plugin Remember Me Controls 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

5.3CVSS6.1AI score0.00439EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/09/05 12:00 a.m.•7 views

PT-2024-38331

Name of the Vulnerable Software and Affected Versions Remember Me Controls plugin for WordPress versions up to, and including, 2.0.1 Description The issue is related to Full Path Disclosure, which occurs because the plugin allows direct access to the bootstrap.php file with display errors enabled...

5.3CVSS0.00439EPSS
SaveExploits0References10
Rows per page
Query Builder