CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Htaccess File Editor: from n/a through <= 1.0.19.
Explanation of Vulnerability in Simple Terms
The Htaccess File Editor plugin for WordPress contains an information disclosure vulnerability that allows unauthenticated attackers to read sensitive data over the network. The plugin fails to properly restrict access to certain files or functionality, exposing information that should remain confidential. This affects versions 1.0.19 and earlier. Site administrators should update immediately to a patched version.
What an attacker can do
Read sensitive information from the site without authentication.
Potential impact on your site
Sensitive data may be exposed to anyone on the internet without your knowledge or consent.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
