Beveiligingsadvies

CVE-2024-6477

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-08-03 06:00:05
Laatst bijgewerkt 2025-08-27 12:00:49
Toegewezen door WPScan
CVSS-score 7.5
Status PUBLISHED

Beschrijving

The UsersWP WordPress plugin before 1.2.12 uses predictable filenames when an admin generates an export, which could allow unauthenticated attackers to download them and retrieve sensitive information such as IP, username, and email address