WP Editor < 1.2.8 - Sensitive Information Exposure via log file

2024-02-1500:00:00

wpscan.com

wordpress

plugin

log file

security issue

information exposure

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Description The plugin stores its logs at a predictable path, making it easy for anyone to leak their content.

CPENameOperatorVersion
eq1.2.8

CPE	Name	Operator	Version
		eq	1.2.8

References

patchstack.com/database/vulnerability/wp-editor/wordpress-wp-editor-plugin-1-2-7-sensitive-data-exposure-vulnerability