Lucene search

K
wpexploitColette ChamberlandWPEX-ID:2711A857-F4AA-4590-8593-3E6E53CEBF05
HistoryMar 28, 2018 - 12:00 a.m.

WP Security Audit Log Plugin <= 3.1.1 - Sensitive Information Disclosure

2018-03-2800:00:00
Colette Chamberland
3

0.032 Low

EPSS

Percentile

91.2%

No protection on the wp-content/uploads/wp-security-audit-log/* which is indexed by google and allows for attackers to possibly find user information (bad login attempts)

 Google Dork: inurl:/wp-content/uploads/wp-security-audit-log/

0.032 Low

EPSS

Percentile

91.2%