Описание
wp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:a:wp_php_widget_project:wp_php_widget:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*
EPSS
Процентиль: 53%
0.00297
Низкий
5 Medium
CVSS2
Дефекты
CWE-200
Связанные уязвимости
github
около 3 лет назад
wp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.
EPSS
Процентиль: 53%
0.00297
Низкий
5 Medium
CVSS2
Дефекты
CWE-200