WordPress allows remote attackers to obtain sensitive information via a direct request for wp-admin/admin-functions.php, which reveals the path in an error message.

Threat-Mapped Scoring

Score: 3.0

Priority: P2 - Serious (High)

• S1 – Steal Customer Account Information

EPSS

Score: 0.00478
Percentile: 0.64053

CVSS Scoring

Affected Products

• cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*
• cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*
• cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*
• cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*
• cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*
• cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*
• cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*
• cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*
• cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*

← Back to Home