CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
The DAP to Autoresponders Email Syncing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed file.
Explanation of Vulnerability in Simple Terms
DAP to Autoresponders Email Syncing versions 1.0 and earlier expose sensitive information that can be accessed over the network without authentication. An attacker can retrieve this data directly without needing to log in or interact with a user. The vulnerability affects the product's core functionality and may expose email addresses, sync configurations, or other data handled by the plugin.
What an attacker can do
Read sensitive information such as email addresses or sync configurations without logging in.
Potential impact on your site
Email addresses, autoresponder settings, or other sync data may be exposed to unauthenticated attackers.
Conditions required to exploit
Network access to the affected site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
