AccessAlly <3.5.7 - Sensitive Information Leakage Detection

WordPress AccessAlly plugin before 3.5.7 allows sensitive information leakage because the file "resource/frontend/product/product-shortcode.php" which is responsible for the accessallyorderform shortcode dumps serialize$SERVER, which contains all environment variables. The leakage occurs on all...

CVE-2021-24226: Exposure of Sensitive Information to an Unauthorized Actor

In the AccessAlly WordPress plugin before 3.5.7, the file "resource/frontend/product/product-shortcode.php" responsible for the accessallyorderform shortcode is dumping serialize$SERVER, which contains all environment variables. The leakage occurs on all public facing pages containing the...

PT-2021-15770

Name of the Vulnerable Software and Affected Versions: AccessAlly versions prior to 3.5.7 Description: The issue is related to the leakage of environment variables due to the dumping of serialize$ SERVER in the resource/frontend/product/product-shortcode.php file. This file is responsible for the...