PT-2018-18597

Name of the Vulnerable Software and Affected Versions WP Security Audit Log plugin version 3.1.1 Description An issue was discovered in the WP Security Audit Log plugin where access to files in the wp-content/uploads/wp-security-audit-log/ directory is not restricted. This allows these files to b...

CVE-2018-8719: Insertion of Sensitive Information into Log File

An issue was discovered in the WP Security Audit Log plugin 3.1.1 for WordPress. Access to wp-content/uploads/wp-security-audit-log/ files is not restricted. For example, these files are indexed by Google and allows for attackers to possibly find sensitive information...