CVE-2015-9483

The CVE-2015-9483 entry concerns ThemeMakers Invento Responsive Gallery/Architecture Template for WordPress, where an information disclosure vulnerability allows remote attackers to obtain sensitive user data (user_login, user_pass, user_email) by directly requesting wp-content/uploads/tmm_db_mig...

CVE-2015-9483: Exposure of Sensitive Information to an Unauthorized Actor

The ThemeMakers Invento Responsive Gallery/Architecture Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information such as userlogin, userpass, and useremail values via a direct request for the wp-content/uploads/tmmdbmigrate/wpusers.dat URI...