CVE-2024-13537

CVE-2024-13537 affects the C9 Blocks WordPress plugin (≤1.7.7) and enables Full Path Disclosure through a publicly accessible composer-setup.php with error display enabled. An unauthenticated attacker can retrieve the web app’s full path, which could aid subsequent attacks. The Wordfence entry li...