CVE-2021-24695

7.5HIGH

The Simple Download Monitor WordPress plugin before 3.9.6 saves logs in a predictable location, and does not have any authentication or authorisation in place to prevent unauthenticated users to downl

게시됨: 11/8/2021업데이트됨: 11/21/2024
NVD에서 보기MITRE에서 보기

설명

The Simple Download Monitor WordPress plugin before 3.9.6 saves logs in a predictable location, and does not have any authentication or authorisation in place to prevent unauthenticated users to download and read the logs containing Sensitive Information such as IP Addresses and Usernames

AI 분석AI 기반

영향받는 제품

tipsandtricks-hqsimple_download_monitor

참조