未評価
Helpful < 4.5.26 - Information Disclosure
CVE-2022-2834
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
The Helpful WordPress plugin before 4.5.26 puts the exported logs and feedbacks in a publicly accessible location and guessable names, which could allow attackers to download them and retrieve sensitive information such as IP, Names and Email Address depending on the plugin's settings
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report wpscan.com
- web wordpress.org