Lucene search

K
wpvulndbWpvulndbWPVDB-ID:FDFBE353-88A3-4F8A-A575-3CBFE9984565
HistoryJun 23, 2023 - 12:00 a.m.

MainWP Child < 4.4.1.1 - Sensitive File Disclosure

2023-06-2300:00:00
wpscan.com
2
mainwp child
version 4.4.1.1
sensitive file disclosure
easily guessable path
user files
bad actors
access
sensitive files

0.003 Low

EPSS

Percentile

68.1%

The plugin uses an easily guessable path to store user files, bad actors could use that to access other users’ sensitive files.

CPENameOperatorVersion
mainwp-childlt4.4.1.2

0.003 Low

EPSS

Percentile

68.1%

Related for WPVDB-ID:FDFBE353-88A3-4F8A-A575-3CBFE9984565