The Accept Stripe Payments Using Contact Form 7 plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via the cf7sa-info.php file that returns phpinfo() data. This makes it possible for unauthenticated attackers to extract configuration information that can be leveraged in another attack.
Metrics
Affected Vendors & Products
References
History
Thu, 12 Dec 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Weaknesses | CWE-732 | |
Metrics |
ssvc
|
Thu, 12 Dec 2024 05:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | The Accept Stripe Payments Using Contact Form 7 plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via the cf7sa-info.php file that returns phpinfo() data. This makes it possible for unauthenticated attackers to extract configuration information that can be leveraged in another attack. | |
Title | Accept Stripe Payments Using Contact Form 7 <= 2.5 - Unauthenticated Information Exposure | |
Weaknesses | CWE-200 | |
References |
|
|
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: Wordfence
Published: 2024-12-12T05:24:22.258Z
Updated: 2024-12-12T14:47:36.552Z
Reserved: 2024-12-05T16:18:55.747Z
Link: CVE-2024-12255
Vulnrichment
Updated: 2024-12-12T14:47:31.086Z
NVD
Status : Awaiting Analysis
Published: 2024-12-12T06:15:23.770
Modified: 2024-12-12T15:15:09.967
Link: CVE-2024-12255
Redhat
No data.