CVE-2025-2841

creationtimestamp| type| source ---|---|--- 2025-04-12 02:51:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11533 2025-04-12 05:42:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmlt6r37qg2h 2025-04-12 06:39:53+00:00| seen| https://t.me/cvedetector/22788...

CVE-2025-2841 Cart66 Cloud <= 2.3.7 - Unauthenticated Information Exposure

The Cart66 Cloud plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.7 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the...

CVE-2025-2841

CVE-2025-2841 affects Cart66 Cloud for WordPress (up to version 2.3.7). It enables unauthenticated access to phpinfo.php, exposing potentially sensitive information. As per Wordfence, this entry is currently Unpatched; no mitigation details are provided in the supplied docs.

WordPress Cart66 Cloud plugin <= 2.3.7 - Unauthenticated Information Exposure vulnerability

Unauthenticated Information Exposure vulnerability discovered by Avraham Shemesh in WordPress Plugin Cart66 Cloud versions = 2.3.7...