Lucene search
Dmitrii IgnatyevWPVDB-ID:6B1A998D-C97C-4305-B12A-69E29408EBD9HistoryFeb 20, 2024 - 12:00 a.m.
Error Log Viewer < 1.1.3 - Directory Listing to Sensitive Data Exposure
2024-02-2000:00:00
Dmitrii Ignatyev
wpscan.com
12
error log viewer
directory listing
sensitive data exposure
php logs
unauthorized access
Description The plugin contains a vulnerability that allows you to read and download PHP logs without authorization
PoC
- Admin should click on “Save as TXT file” in http://your_site/wordpress/wp-admin/admin.php?page=rrrlgvwr-monitor.php 2) Then someone else can go to wordpress/wp-content/plugins/error-log-viewer/saved_logs and download log file from Index of Title
References
Related
wpexploit
wpexploit
Error Log Viewer < 1.1.3 - Directory Listing to Sensitive Data Exposure
2024-02-20 00:00:00
cve
cve
CVE-2023-6821
2024-03-18 19:15:06
cvelist
cvelist
nvd
nvd
CVE-2023-6821
2024-03-18 19:15:06
vulnrichment
vulnrichment
wordfence
wordfence
AI Score
8.6
Confidence
High
EPSS
0
Percentile
9.0%
Related for WPVDB-ID:6B1A998D-C97C-4305-B12A-69E29408EBD9