Add Admin CSS [add-admin-css] < 2.5
unknown
[en] The Add Admin CSS plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0.1. This is due to the plugin utilizing bootstrap and leaving test files with display_errors on. This makes it possible for unauthenticated attackers to retrieve the full path of the web applicati...
- Affected:
- up to 2.5
- Fixed in:
- 2.5
- Disclosed:
- Jul 27, 2024
CVE-2024-6547 on NVD →
Add Admin CSS <= 2.0.1 - Unauthenticated Full Path Dislcosure
medium
The Add Admin CSS plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0.1. This is due to the plugin utilizing bootstrap and leaving test files with display_errors on. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, w...
- CVSS:
- 5.3
- Affected:
- up to 2.0.1
- Fixed in:
- 2.5
- Disclosed:
- Jul 26, 2024
CVE-2024-6547 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database