Unrated
Helpful < 4.5.26 - Information Disclosure
CVE-2022-2834
First seen on SecPulse
Original description The description as published by the source.
The Helpful WordPress plugin before 4.5.26 puts the exported logs and feedbacks in a publicly accessible location and guessable names, which could allow attackers to download them and retrieve sensitive information such as IP, Names and Email Address depending on the plugin's settings
References
- advisory github.com
- advisory nvd.nist.gov
- report wpscan.com
- web wordpress.org