Seraphinite Accelerator < 2.20.48 - Unauthenticated Sensitive Information Exposure via Log File

2024-01-1500:00:00

wpscan.com

seraphinite accelerator

vulnerability

sensitive information exposure

unauthenticated attackers

log files

9.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description The plugin is vulnerable to Sensitive Information Exposure, allowing unauthenticated attackers to extract sensitive user or configuration data from log files.

CPENameOperatorVersion
eq2.20.48

CPE	Name	Operator	Version
		eq	2.20.48

References

patchstack.com/database/vulnerability/seraphinite-accelerator/wordpress-seraphinite-accelerator-plugin-2-20-44-sensitive-data-exposure-via-log-file-vulnerability