Affiliates Manager < 2.9.31 - Sensitive Information Exposure via Log File

2024-01-0500:00:00

wpscan.com

wordpress

affiliates manager

sensitive information exposure

6.9 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.0%

JSON

Description The Affiliates Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.30 via the plugin’s log files. This makes it possible for unauthenticated attackers to extract sensitive data including plugin configuration and debug information.

CPENameOperatorVersion
eq2.9.31

CPE	Name	Operator	Version
		eq	2.9.31

References

patchstack.com/database/vulnerability/affiliates-manager/wordpress-affiliates-manager-plugin-2-9-30-sensitive-data-exposure-via-log-file-vulnerability