Lucene search

K
wpvulndbWpvulndbWPVDB-ID:386B261C-5366-43E5-9F0C-E418DC5B6B14
HistoryNov 24, 2023 - 12:00 a.m.

EWWW Image Optimizer < 7.2.1 - Unauthenticated Sensitive Information Exposure via Debug Log

2023-11-2400:00:00
wpscan.com
2
ewww image optimizer
wordpress
sensitive information exposure
debug log

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.3%

Description The EWWW Image Optimizer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.2.0 via the debug_log function. This makes it possible for unauthenticated attackers to extract sensitive debug data when debug logging is enabled.

CPENameOperatorVersion
eq7.2.1

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.3%

Related for WPVDB-ID:386B261C-5366-43E5-9F0C-E418DC5B6B14