Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-267m-qxcr-pvm4

Опубликовано: 07 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.7 via the 'fileorganizer_ajax_handler' function. This makes it possible for unauthenticated attackers to extract sensitive data including backups or other sensitive information if the files have been moved to the built-in Trash folder.

The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.7 via the 'fileorganizer_ajax_handler' function. This makes it possible for unauthenticated attackers to extract sensitive data including backups or other sensitive information if the files have been moved to the built-in Trash folder.

EPSS

Процентиль: 43%
0.00517
Низкий

7.5 High

CVSS3

Дефекты

CWE-922

Связанные уязвимости

CVSS3: 7.5
nvd
больше 2 лет назад

The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.7 via the 'fileorganizer_ajax_handler' function. This makes it possible for unauthenticated attackers to extract sensitive data including backups or other sensitive information if the files have been moved to the built-in Trash folder.

EPSS

Процентиль: 43%
0.00517
Низкий

7.5 High

CVSS3

Дефекты

CWE-922