Lucene search

K
wpvulndbColette ChamberlandWPVDB-ID:2711A857-F4AA-4590-8593-3E6E53CEBF05
HistoryMar 28, 2018 - 12:00 a.m.

WP Security Audit Log Plugin <= 3.1.1 - Sensitive Information Disclosure

2018-03-2800:00:00
Colette Chamberland
wpscan.com
4

0.032 Low

EPSS

Percentile

91.2%

No protection on the wp-content/uploads/wp-security-audit-log/* which is indexed by google and allows for attackers to possibly find user information (bad login attempts)

PoC

Google Dork: inurl:/wp-content/uploads/wp-security-audit-log/

CPENameOperatorVersion
wp-security-audit-loglt3.1.2

0.032 Low

EPSS

Percentile

91.2%