SL User Create < 0.2.5 - Information Disclosure
mediumThe SL User Create plugin for WordPress is vulnerable to Information Disclosure in versions before 0.2.5 due to a weak secret string. This can allow authenticated attackers to extract sensitive data including configuration files.
- CVSS:
- 4.3
- Affected:
- up to 0.2.5
- Fixed in:
- 0.2.5
- Disclosed:
- Oct 11, 2013