WordPress Plugin Vulnerabilities

Easy Forms for Mailchimp <= 6.9.0 - Sensitive Information Exposure via logfile

Description

The plugin stores its logs at a predictable path, making it easy for anyone to leak their content.

Affects Plugins

Plugin icon
yikes-inc-easy-mailchimp-extender
No known fix

References

CVE
CVE-2024-25095
URL
https://patchstack.com/database/vulnerability/yikes-inc-easy-mailchimp-extender/wordpress-easy-forms-for-mailchimp-plugin-6-8-10-sensitive-data-exposure-via-log-file-vulnerability

Miscellaneous

Original Researcher
Joshua Chan
Verified
No
WPVDB ID
9052f998-91be-4b1d-9a62-84225880f70b

Timeline

Publicly Published
2024-02-12 (about 2 years ago)
Added
2024-02-15 (about 2 years ago)
Last Updated
2024-03-05 (about 2 years ago)

Other

Published
Title
Published
2014-08-01
Title
WordPress 3.6 - Multiple Function Path Disclosure
Published
2014-08-01
Title
Zingiri Tickets - File Disclosure
Published
2014-08-01
Title
Easy Contact Forms Export 1.1.0 - Information Disclosure
Published
2024-04-05
Title
s2Member < 240325 - Limited Privilege Escalation
Published
2013-06-21
Title
WordPress 3.5-3.5.1 Multiple Role Remote Privilege Escalation