WordPress ThemeMakers Diplomat|Political theme information leakage vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.ThemeMakers Diplomat|Political theme is a theme plugin for diplomatic and political websites. WordPress ThemeMakers Diplomat|Political...

CVE-2015-9481

The CVE-2015-9481 entry describes an information-disclosure vulnerability in the ThemeMakers Diplomat WordPress theme (through 2015-05-15). An unauthenticated remote attacker can obtain sensitive user data (user_login, user_pass, user_email) by directly requesting the file wp-content/uploads/tmm_...

CVE-2015-9481

The ThemeMakers Diplomat | Political theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information such as userlogin, userpass, and useremail values via a direct request for the wp-content/uploads/tmmdbmigrate/wpusers.dat URI...