Lucene search

K
wpvulndbDmitrii IgnatyevWPVDB-ID:EAE63103-3DE6-4100-8F48-2BCF9A5C91FB
HistoryDec 13, 2023 - 12:00 a.m.

Debug Log Manager < 2.3.0 - Sensitive Logs Exposure

2023-12-1300:00:00
Dmitrii Ignatyev
wpscan.com
6
plugin
directory listing
vulnerability
debug log
authorization
sensitive data
wordpress

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

36.0%

Description The plugin contains a Directory listing vulnerability was discovered, which allows you to download the debug log without authorization and gain access to sensitive data

PoC

https://your_site/wordpress/wp-content/uploads/debug-log-manager/

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

36.0%

Related for WPVDB-ID:EAE63103-3DE6-4100-8F48-2BCF9A5C91FB