Some AJAX actions of the plugin, available to unauthenticated users and used for support features could allow attackers to obtain potentially sensitive information such as the PHP version, active plugins along with their versions, as well as the unsalted MD5 hashes of the site’s AUTH_KEY and SECURE_AUTH_KEY.
2021-09-01 (about 1 years ago)
2021-09-01 (about 1 years ago)
2022-04-08 (about 11 months ago)