CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jordy Meow Database Cleaner: Clean, Optimize & Repair.This issue affects Database Cleaner: Clean, Optimize & Repair: from n/a through 0.9.8.
Explanation of Vulnerability in Simple Terms
Database Cleaner for WordPress contains an insertion of sensitive information into log files. The plugin logs data that should not be exposed, potentially revealing configuration details or other sensitive information to anyone with access to log files. No authentication is required to trigger the vulnerability. Update to a version newer than 0.9.8.
What an attacker can do
Read sensitive information from plugin log files without authentication.
Potential impact on your site
Sensitive configuration or operational data may be exposed in log files accessible to attackers.
Conditions required to exploit
Network access to the WordPress site and ability to access log files.
Key dates
External resources
Related vulnerabilities
