Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-2302

Опубликовано: 09 апр. 2024
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

The Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.9. This makes it possible for unauthenticated attackers to download the debug log via Directory Listing. This file may include PII.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:awesomemotive:easy_digital_downloads:*:*:*:*:*:wordpress:*:*
Версия до 3.2.10 (исключая)

EPSS

Процентиль: 76%
0.00982
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-532

Связанные уязвимости

CVSS3: 5.3
github
почти 2 года назад

The Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.9. This makes it possible for unauthenticated attackers to download the debug log via Directory Listing. This file may include PII.

EPSS

Процентиль: 76%
0.00982
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-532