CVE-2024-12535

The Host PHP Info plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including, 1.0.4. This makes it possible for unauthenticated attackers to read configuration settings and predefin...

CVE-2024-12535

creationtimestamp| type| source ---|---|--- 2025-01-07 05:38:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/339 2025-01-07 06:16:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrl6ygx2i 2025-01-07 06:18:53+00:00| seen|...

CVE-2024-12535 Host PHP Info <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure

The Host PHP Info plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including, 1.0.4. This makes it possible for unauthenticated attackers to read configuration settings and predefin...

CVE-2024-12535

CVE-2024-12535 concerns the Host PHP Info WordPress plugin. The vulnerability is a missing capability check when including the phpinfo function, leading to unauthorized access to server configuration and predefined variables. It affects all versions up to and including 1.0.4, and can be exploited...

CVE-2024-12535 Host PHP Info <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure

The Host PHP Info plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including, 1.0.4. This makes it possible for unauthenticated attackers to read configuration settings and predefin...