CVE-2018-7204

inc/logger.php in the Giribaz File Manager plugin before 5.0.2 for WordPress logged activity related to the plugin in /wp-content/uploads/file-manager/log.txt. If a user edits the wp-config.php file using this plugin, the wp-config.php contents get added to log.txt, which is not protected and...

CVE-2018-7204

The CVE-2018-7204 issue affects the Giribaz File Manager WordPress plugin (inc/logger.php) prior to version 5.0.2. The plugin logs activity to /wp-content/uploads/file-manager/log.txt, and when a user edits wp-config.php via the plugin, the contents are written to log.txt without protection. Thes...