Openinviter For Wordpress Vulnerabilities

Update plugin. Ryuzaki Lawlet discovered and reported this Sensitive Data Exposure vulnerability in WordPress OpenInviter Plugin. This vulnerability has been fixed in version 1.1.

Affected:

up to 1.1

Fixed in:

1.1

Disclosed:

Jul 27, 2023

This plugin is prone to an error log information disclosure vulnerability. Update plugin.

Affected:

up to 1.1

Fixed in:

1.1

Disclosed:

Jul 27, 2016

The OpenInviter for WordPress plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 1.7.0 via the log_error file. This can allow unauthenticated attackers to extract sensitive data from site visitors including emails and passwords (in clear text) for providers such as Yahoo, Gm...

CVSS:

7.5

Affected:

up to 1.7.0

Fix:

No patched version reported

Disclosed:

Jan 5, 2013

The OpenInviter for WordPress plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 1.7.0 via the log_error file. This can allow unauthenticated attackers to extract sensitive data from site visitors including emails and passwords (in clear text) for providers such as Yahoo, Gm...

Affected:

up to 1.7.0

Fix:

No patched version reported

Disclosed:

Jan 5, 2013

The OpenInviter for WordPress WordPress plugin was affected by an Error Log Information Disclosure security vulnerability.

Affected:

up to 1.7.0

Fix:

No patched version reported