Design/Logic Flaw

The ThemeMakers Diplomat | Political theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information such as userlogin, userpass, and useremail values via a direct request for the wp-content/uploads/tmmdbmigrate/wpusers.dat URI...

CVE-2015-9481

The CVE-2015-9481 entry describes an information-disclosure vulnerability in the ThemeMakers Diplomat WordPress theme (through 2015-05-15). An unauthenticated remote attacker can obtain sensitive user data (user_login, user_pass, user_email) by directly requesting the file wp-content/uploads/tmm_...

CVE-2015-9481

The ThemeMakers Diplomat | Political theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information such as userlogin, userpass, and useremail values via a direct request for the wp-content/uploads/tmmdbmigrate/wpusers.dat URI...