Lucene search

K
wpvulndbWpvulndbWPVDB-ID:0831B9F1-2FC3-4694-9742-7520FD4AC09B
HistoryDec 07, 2023 - 12:00 a.m.

Media File Renamer < 5.7.0 - Sensitive Information Exposure via Log File

2023-12-0700:00:00
wpscan.com
3
media file renamer
wordpress
sensitive information exposure

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.4%

Description The Media File Renamer: Rename Files (Manual, Auto & AI) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.6.9 via the logging functionality. This makes it possible for unauthenticated attackers to extract sensitive data including file upload events and paths.

CPENameOperatorVersion
eq5.7.0

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.4%

Related for WPVDB-ID:0831B9F1-2FC3-4694-9742-7520FD4AC09B