Exposure of Sensitive System Information to an Unauthorized Control Sphere

Overview Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere via the REST API error handler returning unsanitized PHP error messages that include the full filesystem path. An attacker can obtain sensitive system path...

PT-2026-69100

Name of the Vulnerable Software and Affected Versions Kirby versions prior to 4.9.5 Kirby versions 5.0.0 through 5.5.1 Description The REST API error handler can return unsanitized PHP error messages, which allows unauthenticated users to view the full filesystem path of the installation. This...

WordPress Events Manager - Full Path Disclosure Detection

WordPress WP Super Cache plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress WP Super Cache plugin files are publicly accessible withou...

WordPress Data Source for Contact Form 7 - Full Path Disclosure Detection

WordPress Plugin CData Source for Contact Form 7 files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin CData Source for Contact Form 7...

WordPress a3 Lazy Load - Full Path Disclosure Detection

WordPress Plugin a3 Lazy Load plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin a3 Lazy Load plugin files are publicly...

WordPress Ivory Search - Full Path Disclosure Detection

WordPress Plugin Ivory Search plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Ivory Search plugin files are publicly...

WordPress Advanced iFrame - Full Path Disclosure Detection

WordPress Advanced iFrame plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Advanced iFrame plugin files are publicly accessible...

WordPress Load More Anything - Full Path Disclosure Detection

WordPress Plugin Load More Anything files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Load More Anything files are publicly accessibl...

WordPress Ajax Search Lite - Full Path Disclosure Detection

WordPress Plugin Ajax Search Lite files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Ajax Search Lite files are publicly accessible...

WordPress Astra - Full Path Disclosure Detection

WordPress Astra Theme files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Astra Theme files are publicly accessible without ABSPATH protection...

WordPress Plugin iThemes Security - Full Path Disclosure Detection

WordPress Plugin iThemes Security files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin iThemes Security files are publicly accessible...

WordPress Duplicate Page - Full Path Disclosure Detection

WordPress Plugin Duplicate Page files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Duplicate Page files are publicly accessible withou...

WordPress Plugin Hello Dolly - Full Path Disclosure Detection

WordPress Plugin Hello Dolly plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Hello Dolly plugin files are publicly accessibl...

WordPress Plugin Newsletter - Full Path Disclosure Detection

WordPress Plugin Newsletter plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Newsletter plugin files are publicly accessible...

WordPress Plugin SG Optimizer - Full Path Disclosure Detection

WordPress Plugin SG Optimizer Plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin SG Optimizer Plugin files are publicly...

WordPress WP Super Cache - Full Path Disclosure Detection

WordPress WP Super Cache plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress WP Super Cache plugin files are publicly accessible withou...

WordPress Twenty Seventeen - Full Path Disclosure Detection

WordPress Twenty Seventeen theme files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Twenty Seventeen theme files are publicly accessible...

WordPress Elementor Page Builder - Full Path Disclosure Detection

WordPress Plugin Elementor Page Builder plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Elementor Page Builder plugin files...

WordPress Menu Image - Full Path Disclosure Detection

WordPress Plugin Menu Image plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Menu Image plugin files are publicly accessible...

WordPress Call Now Button - Full Path Disclosure Detection

WordPress Plugin Call Now Button files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Call Now Button files are publicly accessible...