CVE-2024-7412

CVE-2024-7412 affects the No Update Nag WordPress plugin. The issue is Full Path Disclosure via bootstrap.php when display_errors is enabled, enabling unauthenticated retrieval of the web app’s full path (versions up to and including 1.4.12). The connected Red Hat advisory reiterates the same vul...