Image Source Control < 2.17.1 - Sensitive Information Exposure via Log File

2024-01-0500:00:00

wpscan.com

wordpress

plugin

vulnerability

information exposure

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.3%

JSON

Description The Image Source Control Lite – Show Image Credits and Captions plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.17.0 via the plugin’s log file. This makes it possible for unauthenticated attackers to extract sensitive data including system and plugin configuration…

CPENameOperatorVersion
eq2.17.1

CPE	Name	Operator	Version
		eq	2.17.1

References

patchstack.com/database/vulnerability/image-source-control-isc/wordpress-image-source-control-lite-plugin-2-17-0-sensitive-data-exposure-via-log-file-vulnerability