CVE-2024-6574

CVE-2024-6574 affects the Laposta plugin for WordPress, with Full Path Disclosure in all versions up to and including 1.12 due to direct access to test files. Unauthenticated attackers could retrieve the web app’s full path, aiding other attacks. The plugin is no longer maintained and has been cl...