Quttera Web Malware Scanner < 3.4.2.1 - Directory Listing to Sensitive Data Exposure

2023-11-2100:00:00

Dmitrii Ignatyev

quttera web malware scanner

version 3.4.2.1

directory listing

sensitive data exposure

exploit

AI Score

9.3

Confidence

High

EPSS

0.001

Percentile

43.7%

JSON

Description The plugin doesn’t restrict access to detailed scan logs, which allows a malicious actor to discover local paths and portions of the site’s code

http://your_site/wordpress/wp-content/plugins/quttera-web-malware-scanner/runtime.log
http://your_site/wordpress/wp-content/plugins/quttera-web-malware-scanner/quttera_wp_report.txt