Lucene search

K
wpvulndbWpvulndbWPVDB-ID:B6E6FA18-A292-49E1-A23B-D30606307455
HistorySep 01, 2021 - 12:00 a.m.

Gutenberg Template Library & Redux Framework < 4.2.13 - Unauthenticated Sensitive Information Disclosure

2021-09-0100:00:00
wpscan.com
51
plugin
ajax actions
unauthenticated users
sensitive information
php version
active plugins
md5 hashes
support features

EPSS

0.002

Percentile

54.7%

Some AJAX actions of the plugin, available to unauthenticated users and used for support features could allow attackers to obtain potentially sensitive information such as the PHP version, active plugins along with their versions, as well as the unsalted MD5 hashes of the site’s AUTH_KEY and SECURE_AUTH_KEY.

EPSS

0.002

Percentile

54.7%