CVE-2021-39327
PoC ×3—CVSS 3.1
5.3 medium
EPSS
72%p99
Published
()
Modified
Description
The BulletProof Security WordPress plugin is vulnerable to sensitive information disclosure due to a file path disclosure in the publicly accessible ~/db_backup_log.txt file which grants attackers the full path of the site, in addition to the path of database backup files. This affects versions up to, and including, 5.1.
- Vendors
- ait-pro
- Products
- bulletproof security
- Ecosystems
- WordPress
- Weakness
- CWE-200, CWE-459
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.