The Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.5 via the 'fluent-support' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/fluent-support directory which can contain file attachments included in support tickets.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NWpmanageninja Fluent Support
APPWpmanageninja< 1.8.6
Powiązane podatności
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjaha...
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPManage...
The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various param...
Missing Authorization vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Exploiting Incorre...
The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to Server-Side Request Forgery i...