CVE-2018-7433

The iThemes Security plugin before 6.9.1 for WordPress does not properly perform data escaping for the logs page...

CVE-2018-7433

The iThemes Security plugin before 6.9.1 for WordPress does not properly perform data escaping for the logs page...

CVE-2018-7433

The CVE affects the WordPress iThemes Security plugin prior to 6.9.1. It stems from improper data escaping on the logs page, enabling information disclosure (Confidentiality Impact: High per CVSS). Mitigation: upgrade to 6.9.1 or later. The provided sources confirm the affected component and fix ...