Restrict Content < 3.2.8 - Information Exposure via legacy log file

2023-11-2300:00:00

wpscan.com

restrict content

information exposure

legacy log file

wordpress

sensitive data

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.3%

JSON

Description The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.7 via the legacy log file. This makes it possible for unauthenticated attackers to extract sensitive data including debug information.